General

  • Target

    Autoruns.exe

  • Size

    2.4MB

  • MD5

    66ba03cf861ef7c02f1ad94680082acc

  • SHA1

    6ed0ac4dca96c3e26e1a98ed7a35a3bee0a49e0c

  • SHA256

    11e8cc7273ec7ae1af6a6b825e201ffe9fed0c53ee040f1089ab621bd69bee28

  • SHA512

    aad362d45eef9039d27f7c2e9328549e2418650f0aa39397aeb6e00be4baf93f2160b7e6065ecdc77afaf3f18e14f606565634164dc92f213d1ad645a78e3f5e

  • SSDEEP

    49152:JRjLCJSLYIujU519eCvepXi/Wsqo69n1lme8CeD3p:jjLCJSLYdjkrWsqo691lmJ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

oxy01.duckdns.org:6522

Mutex

8c47e740704afa553c0acf7809e56295

Attributes
  • reg_key

    8c47e740704afa553c0acf7809e56295

  • splitter

    Y262SUCZ4UJJ

Signatures

Files

  • Autoruns.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections