General

  • Target

    706fd9eb22adac23c973248375c50a02.bin

  • Size

    12KB

  • MD5

    066e18f643de104bb95bda52d88204f8

  • SHA1

    029e698629c21a8bc099adc6bef5c263b886f4f1

  • SHA256

    fb1c1c9bb1eaccdf08ceef1410e835692c17a1ca58711a2994aa4d732e495abb

  • SHA512

    7e666ac9d0e800f5a44fb2e0d8413498a616fe07c1e761bf2fe861b0cbbaaab7582e98404a936f994a1fcb900c7b4578f657d4938465aa2dd64e82fe9ddc1ec3

  • SSDEEP

    192:QbGfaFAjC1Y0mVYgM0r8C6WQBTGBrSq0MLkMdTKbq2CjtmLum8Ko2UFEWcB:TaFbm2gWCMT4rR3dTKbq2C5KoR2

Score
10/10

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

HacKed

C2

bob541882.e2.luyouxia.net:20192

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

Files

  • 706fd9eb22adac23c973248375c50a02.bin
    .zip

    Password: infected

  • 3d8b2bc3fdba588bad1e6ee74050de7a31e386088636bbedf72f2285d3dc819f.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections