General
-
Target
tmpghwcp1xl
-
Size
27KB
-
MD5
2261e40ba4c08e0c539599b3b9b72ad5
-
SHA1
0b0997b4eb6f6bd262a88d4e146a2cfdafab7b1f
-
SHA256
6828edb8d2bf9ddcd7dce57f8e6ffdb27041e5a50313f915c6fc4dbda6f77ccb
-
SHA512
18d3526e0cd2c425be7e6a77f3626ba4e32544c591f84a10d6e07dd068cd0871f162d27119f0671c5ac1769e47e015a742990142f34055ae2a09057d26063cc9
-
SSDEEP
384:lLET0nO4V7Vg4dYtiK9SPYiGGMdAQk93vmhm7UMKmIEecKdbXTzm9bVhcay46KrZ:lmtGg4UndA/vMHTi9bDy
Score
10/10
Malware Config
Extracted
Family
njrat
Version
v2.0
Botnet
SEND______________EMAIL
C2
2626.libya2020.com.ly:2626
Mutex
Windows
Attributes
-
reg_key
Windows
-
splitter
|-F-|
Signatures
-
Njrat family
Files
-
tmpghwcp1xl
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections