General

  • Target

    d2b73e0da02b306cab2d3d4189eb63eca660b4675e55d506e4fd623848da8ae8

  • Size

    29KB

  • MD5

    7d106ad44ecda6524e0631e4aa41856e

  • SHA1

    7c4387bffaad041c0c8e81b5e874db1326ba0caa

  • SHA256

    d2b73e0da02b306cab2d3d4189eb63eca660b4675e55d506e4fd623848da8ae8

  • SHA512

    593ae00d7e957ad19858781de5fae09f3dcf7956bd4bbeb41473624c49c199fe5bfcb0064dbebbc362768c8f636e5dae5819aa3114bdd72c3c057992e80163db

  • SSDEEP

    768:Hqpc1k75kraWTOX1NKqe5e4BKh0p29SgR5E:y755kPzKhG29j5E

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

الله أكبر

C2

gioccho.myftp.org:1177

Mutex

07db318145681dc5e0cbb8c76a1a4fa9

Attributes
  • reg_key

    07db318145681dc5e0cbb8c76a1a4fa9

  • splitter

    |'|'|

Signatures

Files

  • d2b73e0da02b306cab2d3d4189eb63eca660b4675e55d506e4fd623848da8ae8
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections