General

  • Target

    rb.bin.zip

  • Size

    16KB

  • MD5

    7d7bcf9aea85b6d8dea353d2ed4b7da9

  • SHA1

    c906399be883e9fe4dc1ba7844ffe036cc9ed0c5

  • SHA256

    3e10f1ff5876133666efd69174bfcdf083ed092920c8b816ec49fac889ee8c34

  • SHA512

    2353fd71acaffd903a675376c12a46b06c7633c94de19c166868ab1e791906c66b09f19c3b2796a3201efd949aa851bd57494f5771916392e19bfae5b08349cb

  • SSDEEP

    384:B8jzgZxRSL+jHfTD3lGLWC6+ssUzjjrum0E:B8jcZHZ7Eqlft/mm9

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

149.154.158.40:5552

Mutex

05ae292b9bd1d9166affb15be459c4d5

Attributes
  • reg_key

    05ae292b9bd1d9166affb15be459c4d5

  • splitter

    |'|'|

Signatures

Files

  • rb.bin.zip
    .zip

    Password: infected

  • rb.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections