General

  • Target

    0fe9db2d2771eeec1f3596dc025453cc.bin

  • Size

    17KB

  • MD5

    8e954006ecff3e3356aaa1265436cfd0

  • SHA1

    a5eeab74ee65ced1c95b1e4ed69148191ab80f5c

  • SHA256

    856bdf33cc81ffff8d23799e11e64cd92a221857dd902054da267499204884d3

  • SHA512

    b478786a3a3d9f30a8bd1b54ce00e958522b368f0ba20edeae40935065989c88543f0af8cd4bb9f599845cf02b87d247850ac03ee1ca3c4f4b7aa73ea0d2004e

  • SSDEEP

    384:yTfiNZ8cQJoZj8vcJpbSRtA+2R6IhC4xvAzRhM1iYZ5J4287ftRZ:yeNZ8r0ZbSR8hLxIlhM1RZ7428jbZ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

negrotanka666

C2

default-flashing.at.ply.gg:16214

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

Files

  • 0fe9db2d2771eeec1f3596dc025453cc.bin
    .zip

    Password: infected

  • 45a62f1029038d019e1949acfa94d281e14db00b1a2b344b8dbb0676dd2c4f55.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections