General

  • Target

    2892e33bc61787ba004d85a84b277cb8.bin

  • Size

    11KB

  • MD5

    05a431de099a83d9440014da9ae171f7

  • SHA1

    7918f62f9762a6a8c1c7c570633eacaed1ad916a

  • SHA256

    9b04af1cd91f79fd90a2e94891191867680edc838ae5176c5172447f19dfd9c5

  • SHA512

    0963298adcb0dd6e6e14e2c84a29843d6420ac00fd9061b8288950156282e9297c3d41a019c5b2afe6e80b728f3a89a4b8a616b1841b4965652f013b9203fcf6

  • SSDEEP

    192:S9kv2B87oL8X6px8sbeBV4gPXyPwyy+PSql8QOXxJjmo4KeI65VzJ5PRtlsLVV18:TuBCoL8X6MsqB5CPbySSqetxYo0VDpSS

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

C2

182.54.238.236:6662

Mutex

ef8843a67b2df0d584a80294f8a51ad4

Attributes
  • reg_key

    ef8843a67b2df0d584a80294f8a51ad4

  • splitter

    |'|'|

Signatures

Files

  • 2892e33bc61787ba004d85a84b277cb8.bin
    .zip

    Password: infected

  • e117415fc42c71c329bd60c70e310e7f86e177b4fd53cba2dee74f7d2438bdad.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections