Overview

overview

10

Static

static

10

1880-62-0x...ry.exe

windows7-x64

1880-62-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1880-62-0x0000000000400000-0x000000000040E000-memory.dmp

  • Size

    56KB

  • MD5

    e01425a1d431a4e19b6ad0a52d24e3c5

  • SHA1

    6cc5e8e88bf0a2c44d5b477e426ed9744ed45e88

  • SHA256

    5330364a0893d6c4d6c8db0593f1401847866d93f4a8c25542d399f61873aad0

  • SHA512

    eb402f2b47869e69764da3322a2e2e00ae9078108edeeece892f6fa82ca8ac90fcc990056097bfd55bce0206fb2713420f58e7308d5cd11c78ae44dcb6149aea

  • SSDEEP

    768:+nZghV5VXPKzxF+dt+XKvJ+rvajQmIDUu0tifcj:ZfqciYQVk5j

Score
10/10
maxonnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

maxon

C2

192.168.0.12:7777

Mutex

3ab62f678dc707db05684048bdafe83d

Attributes
  • reg_key

    3ab62f678dc707db05684048bdafe83d

  • splitter

    Y262SUCZ4UJJ

Signatures

Files

  • 1880-62-0x0000000000400000-0x000000000040E000-memory.dmp
    .exe windows x86


    Headers

    Sections