General

  • Target

    0b19079ed0047f3f6cc821508d4e9bc84c6e1c387b991e83ba6eb26f03aceab6

  • Size

    23KB

  • MD5

    a85b332c047c8de27627a7cc60331c9c

  • SHA1

    ee0868b3cf788ee1066121a88c74db54f1e5c4e4

  • SHA256

    0b19079ed0047f3f6cc821508d4e9bc84c6e1c387b991e83ba6eb26f03aceab6

  • SHA512

    e4d623c1078326a2a2d7598752ec10688c2fb2f43b8faa09db0b2058dfd1adeea415a9e6b227c3229bcb2c730d5e5e04d34772e57e555137513321b2b152df25

  • SSDEEP

    384:MsqCm6yocx/Yp7jemiO0nd08/VQ6bgNQC5h7tmRvR6JZlbw8hqIusZzZKo:TSoQA6mlcrRpcnuY

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

vistabil

C2

hackers-012.myq-see.com:5552

Mutex

be8b6c17a5cf4e4b4f731143f498422d

Attributes
  • reg_key

    be8b6c17a5cf4e4b4f731143f498422d

  • splitter

    |'|'|

Signatures

Files

  • 0b19079ed0047f3f6cc821508d4e9bc84c6e1c387b991e83ba6eb26f03aceab6
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections