General

  • Target

    6ac1d4dc88a8ed789f5850ed42ba036f5618b65babefe46bfaed14342c2582a5

  • Size

    29KB

  • MD5

    1b8e8f13d7ae9693cc0c4102a72d2880

  • SHA1

    38cd29bd023a876c6a0caa932be0a0da14c21e53

  • SHA256

    6ac1d4dc88a8ed789f5850ed42ba036f5618b65babefe46bfaed14342c2582a5

  • SHA512

    ceff454be76f8559621bdeb3b04dc7583605eb47b0328308aa9efff99d57e3a0ddb81492e14548cc8ef34c266e9fde7a4f315090e1b83f382c323606416242e3

  • SSDEEP

    384:6WjNl7XNRoWGVulRnJ5XbUqGmqDwg/LfeQ9GBsbh0w4wlAokw9OhgOL1vYRGOZzL:J7ToWGVKvRU8qF/beZBKh0p29SgR7H

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

newgr

C2

userchange.no-ip.biz:81

Mutex

82bf799994723b587fa90adad9db69f4

Attributes
  • reg_key

    82bf799994723b587fa90adad9db69f4

  • splitter

    |'|'|

Signatures

Files

  • 6ac1d4dc88a8ed789f5850ed42ba036f5618b65babefe46bfaed14342c2582a5
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections