General

  • Target

    2016-55-0x0000000000140000-0x0000000000152000-memory.dmp

  • Size

    72KB

  • MD5

    d59dc04b89884bc9e9516868ca92553f

  • SHA1

    6f9dea35eafb06a80526ed5dae6feffdd49b97a2

  • SHA256

    8a10dc5d3f61e2b14443f4363510dfc9875902628f00f93a8189db27e3565b93

  • SHA512

    0067092b9fab3e5e772d0799a7b90b491b9f961430f19ba9ea4dcd8a9274b70029d1509d773a8bc2e32dfa7d4034710aa512b388090249b4aa3b1f4647bcfe23

  • SSDEEP

    384:JZyjdElQ5GoyyBrlr0DiEuEe83H/zIIij+ZsNO3PlpJKkkjh/TzF7pWnV/greT0c:LRmolyBr907NRuXQ/o4/+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

2.tcp.eu.ngrok.io:18666

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

Files

  • 2016-55-0x0000000000140000-0x0000000000152000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections