General

  • Target

    a3680ece4a0ea970982dac2092e1c66d8eac6da518674019553c4569742de5dd

  • Size

    29KB

  • MD5

    64901fc68ee70734050e8d0c2480afa8

  • SHA1

    2dd4d3ea6b3506e63f4be7bbea8409eaaa2b4519

  • SHA256

    a3680ece4a0ea970982dac2092e1c66d8eac6da518674019553c4569742de5dd

  • SHA512

    407a2170f01bdc358f88ea26740fd974ec4426d959c1b654b5cb7fdf9be28ca4ebcc6665dc53224c96b0bd5c5eebb6841e2707b383c01e6af9bea89d7fdd8860

  • SSDEEP

    768:fY7bXEI+Ge1gFaYqwzLeiBKh0p29SgRvq:w7bXh7RznKhG29jvq

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

FucKeD

C2

gho3stseek.no-ip.biz:1177

Mutex

12ce4e06a81e8d54fd01d9b762f1b1bb

Attributes
  • reg_key

    12ce4e06a81e8d54fd01d9b762f1b1bb

  • splitter

    |'|'|

Signatures

Files

  • a3680ece4a0ea970982dac2092e1c66d8eac6da518674019553c4569742de5dd
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections