General

  • Target

    8b875dea6f06648b980ca2e886db57ae69750485f92f5ac0c3994189b3017cc4

  • Size

    1.4MB

  • MD5

    e9e855f5e1ff15983a5c44a48c91d761

  • SHA1

    afe35689801b6d611c94b1b0f27c824c8b849b04

  • SHA256

    8b875dea6f06648b980ca2e886db57ae69750485f92f5ac0c3994189b3017cc4

  • SHA512

    fa2646707393e4fd3c431382dcfb02b655ea25821e553fa4768a8e8142c7639dc533b344b7bc6556cd7a8add13c98e36f164acb1c9ce57bfa719c732f3866c29

  • SSDEEP

    24576:syf+FQa+iNcXCnKv7B21o5j9mrtAcI4tdUlyeVEVniUGSa7DP3qmR3dxBwrxF:sk+xNcXfLAJA/NoeVKiNVnPamPxBwtF

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

Prince Muhammed

C2

iammuhammed.noip.me:1177

Mutex

ba4c12bee3027d94da5c81db2d196bfd

Attributes
  • reg_key

    ba4c12bee3027d94da5c81db2d196bfd

  • splitter

    |'|'|

Signatures

Files

  • 8b875dea6f06648b980ca2e886db57ae69750485f92f5ac0c3994189b3017cc4
    .rar
  • GeoIP.dat
  • Mono.Cecil.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NAudio.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/Mic.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/cam.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/ch.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/fm.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/pw.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/sc2.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Stub.manifest
    .xml
  • njRAT.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • njrat 0.6.4 config.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • stub.il
    .ps1