General

  • Target

    47f562395acc126eaf2d506e417a3e1fabaa038246aaa50eee8795fa98d47196

  • Size

    23KB

  • MD5

    dc4bc52ea7c20e477376187f79e47ff4

  • SHA1

    2011edbe0fb5a19f4590b20e8a5ca18b129dbf10

  • SHA256

    47f562395acc126eaf2d506e417a3e1fabaa038246aaa50eee8795fa98d47196

  • SHA512

    ba610fd2bd728f5485734a01c2a5e1d09549f0c2b0f83ddc2c66a27d3025d2f33fd56a2bb477c4f75aed98f465faa44aade27aceead6f66d71cbc6194db3c01e

  • SSDEEP

    384:C/slUlEvOEJ8xWwYJOMiOBZEdj1567gtwi5HhbQmRvR6JZlbw8hqIusZzZQ/1:CgeEvwIlLMRpcnut1

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

roko.duckdns.org:5552

Mutex

2c9b673ac2dba3d261411c37b10c3b5e

Attributes
  • reg_key

    2c9b673ac2dba3d261411c37b10c3b5e

  • splitter

    |'|'|

Signatures

Files

  • 47f562395acc126eaf2d506e417a3e1fabaa038246aaa50eee8795fa98d47196
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections