General

  • Target

    f5d230103912e9b6015bf917e5831375.bin

  • Size

    16KB

  • MD5

    1badf2d699c20deb021ec83de7a32912

  • SHA1

    ba7acd430f3d3a87a0bfe5f83a408a467f756e25

  • SHA256

    c3e872b2491a055e93ca3b059d87991f60f02c45fc3b3100d355bdd05c1ca443

  • SHA512

    004ddc782a681225ec417b8fc779ac29ebd0d4c52f099c0feea7ac4193d6e82b9a7128046b498c2cc6c7b6113a21964fb7687566229c7b7d24177da684941687

  • SSDEEP

    384:O2aItdOBQb5kUY9p4I8uvDpuoF3WKIKiSq8EcWO344eIsRWdC:Ov6H5Sj8uZ3kg/xWOhCWdC

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

212.187.4.161:3232

Mutex

6bf55e0177bd5d9e7a5d6196e0752083

Attributes
  • reg_key

    6bf55e0177bd5d9e7a5d6196e0752083

  • splitter

    |'|'|

Signatures

Files

  • f5d230103912e9b6015bf917e5831375.bin
    .zip

    Password: infected

  • 2a103cb84af50753e1728ec5190e4b9b9c8583f602b4e9f775f0ff9ca1a9272a.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections