General

  • Target

    920-55-0x0000000000150000-0x000000000016C000-memory.dmp

  • Size

    112KB

  • MD5

    6bf92ac881f8bcf056d86806f358f2ad

  • SHA1

    f0576d75b587612fb22137757c0486103e05eec1

  • SHA256

    ba38db076db9709a7b5e70a9a81ce2b1116800e60951006c4c5f4534fd55f16d

  • SHA512

    a39557f3359dbd072234de4f22da937687bac992ce2182bdd39ef2cbd3f052d7c238f82ebd908291e24eb54f9937a22be62bbfc20e0e2c9d4213c55fe4da4c04

  • SSDEEP

    768:zY3rETnkpjTMpALPGMtsas88EtNXhU9f1mxCXxrjEtCdnl2pi1Rz4Rk3BsGdpVgM:6E7kVbPGHz88EbE1pjEwzGi1dDRDVgS

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

Zm9ycnV4eC5kZG5zLm5ldAStrikStrik:OTA5MA==

Mutex

30bf20a7c4c21398efee41949036ac7b

Attributes
  • reg_key

    30bf20a7c4c21398efee41949036ac7b

  • splitter

    |'|'|

Signatures

Files

  • 920-55-0x0000000000150000-0x000000000016C000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections