General

  • Target

    new‮xcod.scr

  • Size

    154KB

  • MD5

    d7b98849017edbe1a96da0f29523535f

  • SHA1

    ddeb0f76ecf9c9b0574ce6fa1cd127970928c947

  • SHA256

    990311b73949f7e93e72b59ff5c9549d42a57747cd19673f959d0435e7d1cb04

  • SHA512

    d32a815cd9928217ec47007bc3038f427b3ed01493ebc24cf6cde39a4a8e863bf5137380186101744ad3272244a86d9201a65c5b5bb43ec6bd43992f15380a52

  • SSDEEP

    768:D6a6lOt1Man8E2N6FikUt34okSNrmwFvfu0YMDHPs3L7XJSxI3pmhmNq0vTW:D61cDnCN6FikSJDCwsNMDSXExI3pmhm

Score
10/10

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

oxy01.duckdns.org:6522

Mutex

8c47e740704afa553c0acf7809e56295

Attributes
  • reg_key

    8c47e740704afa553c0acf7809e56295

  • splitter

    Y262SUCZ4UJJ

Signatures

Files

  • new‮xcod.scr
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections