General

  • Target

    Payload.exe

  • Size

    54KB

  • MD5

    446096e121c73997527a4d7b540a104a

  • SHA1

    51aa542829c838d7e09f5ef57049106ead250681

  • SHA256

    105401ab6d152da2f6d2dc426a1473646a1350f5b95459c60d34e6c3c8aa6669

  • SHA512

    9d6d7ca9a26a6b946bb87450c63459b302761a0a5f9a948493f58f37fe2b48e042359a464f34c19faf26280caccac2385c8dc63c4d9ea95e489e447c39778df6

  • SSDEEP

    768:W8uZYt1Manc65+1ONF6SAF+5pOegIUn3wDJd8dQv7XJSxI3pmOY3L:WfGDnjtNF6S+EpO2Un3YdjXExI3pmN7

Score
10/10

Malware Config

Extracted

Family

njrat

Botnet

Victim

C2

oxy01.duckdns.org:6522

Mutex

8c47e740704afa553c0acf7809e56295

Attributes
  • reg_key

    8c47e740704afa553c0acf7809e56295

  • splitter

    Y262SUCZ4UJJ

Signatures

Files

  • Payload.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections