General

  • Target

    a0947aa23293cbd62533df794b4faf8e.exe

  • Size

    23KB

  • MD5

    a0947aa23293cbd62533df794b4faf8e

  • SHA1

    f4d9134c1587503b9fc49c70c380da9cc3e8582a

  • SHA256

    a7474e7815076c34f5be59697ed7e440b59177440d6e87dbbe587c00f370c6d1

  • SHA512

    a9341a7c6f311b0ce6855cd7fe6bbdf33ac9130b628c353f1e2355d4b8f3b85a41eec96add76e8117e9a02395dfbbf3fd3a9bd0b637bbd85bc96b61dec96390b

  • SSDEEP

    384:w/Kh2mZsxYY5fliOdecPFQ6Lg9gSZRr9mRvR6JZlbw8hqIusZzZtE:rlgPFdhRpcnuF

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

GHAWY HACKER EGYPT NjRat 0.7D v.2

C2

uk-brakes.at.ply.gg:24598

Mutex

971b96cdc98042f970cb9fe401797d6f

Attributes
  • reg_key

    971b96cdc98042f970cb9fe401797d6f

  • splitter

    |'|'|

Signatures

Files

  • a0947aa23293cbd62533df794b4faf8e.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections