General

  • Target

    Trojan.MSIL.Disfa.bqd-c5031bf57b78ac032e2e9945b41e3262197c03d0b62295e79506b0ed46a985c6.exe

  • Size

    30KB

  • MD5

    b7152f77deb2f746e8efd8484f255c48

  • SHA1

    77334930f8908c9a761ebfec75be3b5caea6b146

  • SHA256

    c5031bf57b78ac032e2e9945b41e3262197c03d0b62295e79506b0ed46a985c6

  • SHA512

    16059d20da61098ddb1b5c4fbe7ec9152da3dfc7a43db9d98f31aea8d98f31fe34b85a7f62f1cadc269a9d19c1d4aaeed328fb18957075c90c5756e0c202b2e8

  • SSDEEP

    384:6Ymdk8XvCJrQLdRGSiEYF7Y65gPyx6BDXNRmRvR6JZlbw8hqIusZzZFOBdrC6ZZq:twWkti/aeRpcnu/BdrRZZEhZAViSA

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

vitima

C2

vitimassubindo.duckdns.org:5552

Mutex

e3876d3eaef7cff3e787dc1adc27701d

Attributes
  • reg_key

    e3876d3eaef7cff3e787dc1adc27701d

  • splitter

    @!#&^%$

Signatures

Files

  • Trojan.MSIL.Disfa.bqd-c5031bf57b78ac032e2e9945b41e3262197c03d0b62295e79506b0ed46a985c6.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections