General

  • Target

    5e150e12f7ead84c5fbc9ac02c1ade087c3a0067819e9aa363e0d90a223167b6

  • Size

    29KB

  • MD5

    f94ed3583aa2fc8c3b5964a75bcc5460

  • SHA1

    ce04221ff0268546630b021bd87fbdf394210ba5

  • SHA256

    5e150e12f7ead84c5fbc9ac02c1ade087c3a0067819e9aa363e0d90a223167b6

  • SHA512

    e727e3552e864c8524dee0721c29a9434ab2b919780e5ac14cc2d6cc65c8896a49af933df93e8866ada9663ee10446c7562bce474b04588557851998f82f510d

  • SSDEEP

    384:oZCINl7rZt4AgSTnd5fGmjmumqD418+eYKGBsbh0w4wlAokw9OhgOL1vYRGOZzqr:o/7v4AgMdgmjAq8XeIBKh0p29SgRM5

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

HacKed

C2

mamostayanpoolllll.ddns.net:1177

Mutex

368fc7f563096ad51849f0d2c298fc08

Attributes
  • reg_key

    368fc7f563096ad51849f0d2c298fc08

  • splitter

    |'|'|

Signatures

Files

  • 5e150e12f7ead84c5fbc9ac02c1ade087c3a0067819e9aa363e0d90a223167b6
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections