General

  • Target

    14e7527286628b9a3db838dcb20e96a56f5d9bedbe38b6b06fc3caf7b2ea3eb6

  • Size

    10KB

  • MD5

    37902d644ff9f4a8e0941d0a2099a7fc

  • SHA1

    ec902a42d2030ab17d273bc8369d8e2eaee84ebb

  • SHA256

    14e7527286628b9a3db838dcb20e96a56f5d9bedbe38b6b06fc3caf7b2ea3eb6

  • SHA512

    aae032538ebc0ff8c0b9265f818e0f73db23863f5c4b43acb9a363317b191830e76eff7ce65199d8690092b68025f4aa0597647a4a78c3ef58e8cbd0292ddabd

  • SSDEEP

    192:p26qcDE3ddJ7z593GqsR1IzMrzF5DGcSkQ70mM3NT/gTTAtABglRvKmY:U6qckddBLkR+zMvGOFdbgsA6RvKmY

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

dofus

C2

volkov2014.ddns.net:123

Mutex

3634b8c969047b1aa244e63e9c21a96a

Attributes
  • reg_key

    3634b8c969047b1aa244e63e9c21a96a

  • splitter

    |'|'|

Signatures

Files

  • 14e7527286628b9a3db838dcb20e96a56f5d9bedbe38b6b06fc3caf7b2ea3eb6
    .rar
  • onling.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections