Overview

overview

10

Static

static

10

852-56-0x0...ry.exe

windows7-x64

10

852-56-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    852-56-0x00000000001A0000-0x00000000001AC000-memory.dmp

  • Size

    48KB

  • MD5

    b8cf98967c5d6d8190cf22005771b627

  • SHA1

    608173fa88c69dfe0fa0a5af95df9105716280d3

  • SHA256

    29a53b0250c7ebab8c6f42089f6e2d8a2ec5124868bfe8211d5edb5dcf0d07fb

  • SHA512

    4a2780ee29c79eac870dada0896582d6e96c83a219dd908f3e27e0a752fdcd2490c12546f9d504524dba8fb9b1c3885ccc7011e4c9cae51bfdddf835776ae541

  • SSDEEP

    384:MluBPiZCMfdfSJrQbsLRGSIxYVL46pg/i8BD9FmRvR6JZlbw8hqIusZzZkV:bOmhtI+RpcnuD

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hadzija.duckdns.org:6969

Mutex

294b50c2f7b9b92f1ec7b2d45e62f978

Attributes
  • reg_key

    294b50c2f7b9b92f1ec7b2d45e62f978

  • splitter

    |'|'|

Signatures

Files

  • 852-56-0x00000000001A0000-0x00000000001AC000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections