General

  • Target

    9a3a900bb72fb435b213093c5d757ccf29f387d3ef59b79f360d8ede7bc40a8a

  • Size

    387KB

  • MD5

    32a3596e5786c214d7f6996408359c4e

  • SHA1

    3bd4a962af09cfef43fa1e50ce33d2d1967a4bb0

  • SHA256

    9a3a900bb72fb435b213093c5d757ccf29f387d3ef59b79f360d8ede7bc40a8a

  • SHA512

    a259968643339ee1783ea59e5c474668f0e1962da3995ee06507f6a05091401abd49481688c02ccad98ab1abbbdea5f54d745ddb8466e35b86f511bb02e5cd4b

  • SSDEEP

    3072:AD2bP0edvBooLVyqtlndzMyKPVHvLthh/xLDAluVY8hLGhTQzmRMUCvCoq9G1W:ASd/Zlld4hLGhTQKRMnvj

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

NJ-BOYشير ايرث لنك

C2

wawe2014.linkpc.net:1222

Mutex

c3991e87e90d7e52140a05ad49fb8921

Attributes
  • reg_key

    c3991e87e90d7e52140a05ad49fb8921

  • splitter

    |'|'|

Signatures

Files

  • 9a3a900bb72fb435b213093c5d757ccf29f387d3ef59b79f360d8ede7bc40a8a
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections