General

  • Target

    bd5406135db5d453824f96005dcb69f2.exe

  • Size

    80KB

  • MD5

    bd5406135db5d453824f96005dcb69f2

  • SHA1

    cb81dc2dfe832dbf9088a15e7bf751488838ee15

  • SHA256

    28f51ae44cf7b1faf2e5350e24e9596672b99df9a8dc0d4dcf279dcbe0eaf121

  • SHA512

    b04d18a95ee47014c63d5621d9c51ba51c3fb614d70e92200876cabac7e8fac4ae99bc4bd05a4353379651ea3aa4a3b54217a7c32aa976fbfdcc6e56bdcaf53a

  • SSDEEP

    1536:bMv4Dnpe/NoTcwiDESPDywsNMDzXExI3pm9mrALpeOlwT:c4Dn8ymDRPDywsNMDzXExI3pmrpDlwT

Score
10/10

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

oxy01.duckdns.org:6522

Mutex

9d5ce28ee0015092fdcbbede58e23910

Attributes
  • reg_key

    9d5ce28ee0015092fdcbbede58e23910

  • splitter

    Y262SUCZ4UJJ

Signatures

Files

  • bd5406135db5d453824f96005dcb69f2.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections