General

  • Target

    565309b315fb6e7eae4a97cdcdedce51721304f7fb340a0c1de5499df05f6377

  • Size

    29KB

  • MD5

    02673b860c9751d73f732c500b3b0284

  • SHA1

    dd2b8be03620b50b202ffa029a947120f09e22f3

  • SHA256

    565309b315fb6e7eae4a97cdcdedce51721304f7fb340a0c1de5499df05f6377

  • SHA512

    6046c77440733c705e234e41115616f01ddb9c788ddde3dac856a7c676a59f05eb6870934bc105a73ef2f648849e6d0afb5f04217e91a2703b8c7d7c97232962

  • SSDEEP

    384:hKLNl7zRVoIY6ENV5bGq3COmqDEdmWefqGBsbh0w4wlAokw9OhgOL1vYRGOZzsKQ:u7noIYTzL3cqomWedBKh0p29SgR0U+

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

Darawan

C2

muhamed-kirkuk.no-ip.biz:1177

Mutex

7d1faae25eddb442c1d25593837f1eba

Attributes
  • reg_key

    7d1faae25eddb442c1d25593837f1eba

  • splitter

    |'|'|

Signatures

Files

  • 565309b315fb6e7eae4a97cdcdedce51721304f7fb340a0c1de5499df05f6377
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections