General

  • Target

    41c865e142f26e975a3ab16f70eff9c1.bin

  • Size

    17KB

  • MD5

    ae8b7d1b806090de2353c8a1c27071ea

  • SHA1

    d3749fc0567f30b42e8369696fbf4b9d6f40c8bf

  • SHA256

    67f8b11f9c28bb8b39f600bd06c3895a970da920d5741da31bbe74dc932099f3

  • SHA512

    dac58160ca50234d9179997df85564844e1524a97d91b765ecae2efd31c6886f8f4eb89d58af3b69fd4eda0213a47532bad1e69bfd3ce6104e691a48fcc3b14c

  • SSDEEP

    384:vbqxadpyX5c/mZGQR4GJVrOv2yYtUvF/Zwt8Vs/HJESunPEAvlzYE:zqxa7mZoAOvYyVsRKnPH5

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

User

C2

165.227.31.192:22537

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

Files

  • 41c865e142f26e975a3ab16f70eff9c1.bin
    .zip

    Password: infected

  • 2fe4bff11a2945f868877630b07625d5867d2d332a2af2445597baa9f3d1e33e.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections