General

  • Target

    375bc488f150781ef73a88ff0b119a754e6f1f59c07c7cee9e9b7fc1d6611ede

  • Size

    23KB

  • MD5

    cc0d7079fce54b90a7c6bda318529fbd

  • SHA1

    87098b05653157032f6f2339aa3dd3aebcece1a5

  • SHA256

    375bc488f150781ef73a88ff0b119a754e6f1f59c07c7cee9e9b7fc1d6611ede

  • SHA512

    fd38d6a63e9b0b049386e154120c8385e0b034f9f119445932ebc3c49ad1df2ffefcb7e5c11afbb432d421e7308b9158ab0c93338acb838db07a9ba6dbec4e8c

  • SSDEEP

    384:eV8aZYC9twBNdcvFaly2H0dbJo6HghcASEJqc/ZmRvR6JZlbw8hqIusZzZ7H:edY+sNKqNHnSdRpcnus

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

pipo

C2

hamilessel.ddns.net:5552

Mutex

47c3d7f065c14d3666eb9363a4363c50

Attributes
  • reg_key

    47c3d7f065c14d3666eb9363a4363c50

  • splitter

    |'|'|

Signatures

Files

  • 375bc488f150781ef73a88ff0b119a754e6f1f59c07c7cee9e9b7fc1d6611ede
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections