General

  • Target

    f99281732a608da139c6b49292a03f8ef779abef062204f676e663a0558f1e7b

  • Size

    119KB

  • MD5

    28664307a1cb25d818385742f3166569

  • SHA1

    c1f184c1617daff5f7674927704df95b213094d4

  • SHA256

    f99281732a608da139c6b49292a03f8ef779abef062204f676e663a0558f1e7b

  • SHA512

    0ddd7b298f4a616b68f6ea64caf7b465f9da2b7dcc97ca5861f0ef82000ceebacad4d54f9f2176243d0a4573a0db6a5379af1d026cd65bc0612b74d36aed059f

  • SSDEEP

    3072:NglF0wJfbXgPgUzPZcsBMkfxE9ZtE/4Z34no4:olbON9/fxWZtu4Z3A/

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

saoudi-004.ddns.net:1177

Mutex

402b24952a2e3bf2083ce4281215f2fe

Attributes
  • reg_key

    402b24952a2e3bf2083ce4281215f2fe

  • splitter

    |'|'|

Signatures

Files

  • f99281732a608da139c6b49292a03f8ef779abef062204f676e663a0558f1e7b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections