General

  • Target

    9650007ca5be683593b797529da2d6f4.exe

  • Size

    26KB

  • MD5

    9650007ca5be683593b797529da2d6f4

  • SHA1

    2646d4cac6fa4a652fbcd0fc859c4595549e09a9

  • SHA256

    7cb1e62c090d06a467b3833d375872c26c075b54d1b7043796c2fba6e9d9d8fb

  • SHA512

    4f177779df95d52f07367369c83160ffa70c42a76956bd6ea55304991fb1f90aeea0de42a12443d86ecce7cf50e1bd303bbe76077b1960d861df621e0ad61c1f

  • SSDEEP

    384:mLKEr2bel2kBdDhLGJYCLIPuRmCMJAQk93vmhm7UMKmIEecKdbXTzm9bVhcaB6g1:Al3VDhIAJA/vMHTi9bD

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

System Guard Runtime Monitor Broker Service

C2

code-backed.at.ply.gg:26430

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

Files

  • 9650007ca5be683593b797529da2d6f4.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections