General

  • Target

    sas.exe

  • Size

    79KB

  • MD5

    182686e01fc0a32d00b2ce80c327b130

  • SHA1

    7524e797957bae4bd94679652569249cb83667ef

  • SHA256

    69f269751b60b8503b524a67d6a24a9b55b50f243dee8e0fbe7ae0b09b5414ce

  • SHA512

    e2a1c19621e9b5895f0a82af48e90378569e49691e938c3a3263cd527a403dcc7ff2875d49aeb9752ff685d866aa7f68e086adfa66abba7b690e12a852200841

  • SSDEEP

    1536:wpWLCDnNENsG5uzH9SG7QOQ9i8WgcH4AikGkk45aIXExI3pmDx2I3:/LCDnmuzH9SG7VwnWNXExI3pmh

Score
10/10

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Client

C2

oxy01.duckdns.org:6522

Mutex

e06cff8e57f0463e6228dbc0cf66c97e

Attributes
  • reg_key

    e06cff8e57f0463e6228dbc0cf66c97e

  • splitter

    Y262SUCZ4UJJ

Signatures

Files

  • sas.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections