General

  • Target

    0c1f581841ab2c65bf2115b88946f0d6.bin

  • Size

    17KB

  • MD5

    d891f2483f10c0582226f92a61e6bd4e

  • SHA1

    ec05a27e3f43ae8e273fe6811e8e135dd9066196

  • SHA256

    002004c09e57f6476ebf12f8cbc8e50017060f3da704eac1db54e1b9473eef39

  • SHA512

    45f24f270af4e516f311e6dfd82a07ebdb93de7c314bfce5f4e7a73c7b9261321248e5112e6eacc6d19acaaa10abc0ac6188d2e9524cd048a3972ea8e632c2c5

  • SSDEEP

    384:TGF+oT701o30Eh8/dttjpab8EgoQKpXPVTge/j4ASdRvK9QAZ4:TGoW0I0l1ttjcb8doQKWe/jT6IQAZ4

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

negrotanka666

C2

default-flashing.at.ply.gg:16214

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

Files

  • 0c1f581841ab2c65bf2115b88946f0d6.bin
    .zip

    Password: infected

  • 813ed01bed69e0d9dad949c955476901a4806418ba9c6c725a74f2d67d1240e6.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections