General

  • Target

    Payload.exe

  • Size

    55KB

  • MD5

    3e3268cf069137c674bc74f670e97361

  • SHA1

    fb6107e9a8cb53d36061d094915b38f31b26d066

  • SHA256

    73dab74b1efbf4f884ccef27a7c02a5ff25b06c833e1f99a54a5b55ac7aef7c7

  • SHA512

    be1298ccfae846d6e28da85cb5923bf60b1b0d0d47f194fa237fa048f774976075b7b92b9c372d1ccb094434aa77bf2b7ca221b93e37dee951cba0a5acea217f

  • SSDEEP

    1536:xMs4Dnpe/NoTcwiDESPDywsNMDzXExI3pmQm:N4Dn8ymDRPDywsNMDzXExI3pm

Score
10/10

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

oxy01.duckdns.org:6522

Mutex

9d5ce28ee0015092fdcbbede58e23910

Attributes
  • reg_key

    9d5ce28ee0015092fdcbbede58e23910

  • splitter

    Y262SUCZ4UJJ

Signatures

Files

  • Payload.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections