General

  • Target

    24c06159b8a5b1b3298cf16d7f4f1254.exe

  • Size

    55KB

  • MD5

    24c06159b8a5b1b3298cf16d7f4f1254

  • SHA1

    7aa27dc9f231790e40cefb47d7bf3c6e3aea9761

  • SHA256

    d626c336748b19deb10a0c66c86cdf8f70ba2e12d9b8de0652487f03c47aecae

  • SHA512

    93f0c77115c6601acac06c2c7c5bd9fb783fffc29e3ca5bc581bc9fc36cdf72baf631a4b185601c9747ce3a8f26000107225d1e011490c211e7e4cd4dad487c5

  • SSDEEP

    768:8Uiy1ut1MankI2Nthie/R3Q0kSNcmwFvfu0YMDHPsOL7XJSxI3pmam:8U18Dn2NthieZdDpwsNMDBXExI3pmam

Score
10/10

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

hold-oo.at.ply.gg:25940

Mutex

dac03ed3252eed005d75e4daece12f93

Attributes
  • reg_key

    dac03ed3252eed005d75e4daece12f93

  • splitter

    Y262SUCZ4UJJ

Signatures

Files

  • 24c06159b8a5b1b3298cf16d7f4f1254.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections