General

  • Target

    cb140929d00422f88bc8298d840d09f7c0042d30c1e82b92749c4ec04166d19d

  • Size

    23KB

  • MD5

    74828f39c6a9e6f9b412358b6003b135

  • SHA1

    5897498a5c3715c74199b844abcc40b2328f553f

  • SHA256

    cb140929d00422f88bc8298d840d09f7c0042d30c1e82b92749c4ec04166d19d

  • SHA512

    4315d0392e9598077ffc9ff854c9a23e994d41712c107b166ba074f0b05ada4abc4e111b6398e3915164307c2043d2631acc9477a789a521c463fc67b79515de

  • SSDEEP

    384:Ywz6+T4IjWZFNwXU0eiNUBdvt6lgT+lLOhXxQmRvR6JZlbw8hqIusZzZbHA:TTbC81NgRpcnu8g

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

IP

C2

diffdns.duckdns.org:11767

Mutex

74bb39ec2c6248bd84e17959cd2bdd09

Attributes
  • reg_key

    74bb39ec2c6248bd84e17959cd2bdd09

  • splitter

    |'|'|

Signatures

Files

  • cb140929d00422f88bc8298d840d09f7c0042d30c1e82b92749c4ec04166d19d
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections