Overview

overview

10

Static

static

10

3e99cae52e...3a.exe

windows7-x64

10

3e99cae52e...3a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1a3f1ea6b4b990b1c1743d13d1865a07.bin

  • Size

    11KB

  • MD5

    14d10462c2680d08a87e8b660bc99058

  • SHA1

    bc340045009ef5e938842a7cf9f43d829d4b2f7b

  • SHA256

    7b4212b704110435611499a29d12391452a55c98efbd7639545575d192d473e4

  • SHA512

    56f187c348c0f55d87da6a536d7c7b2ddc8203bc3c12d17e93d99bddc9415cc64b6245dea7025c5bde193f7a0d4f7cba1666875a34cf7e183be02eb06277b1f1

  • SSDEEP

    192:GpScAvos8q68PCAo5Wayv5bqgLEUjqTvQD2gywy2Tqgapnvdyh7I5VJdZZ:GjAdHPXpdbO7C2g62TqHnvwI5VlZ

Score
10/10
crossfirenjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

CrossFire

C2

audiodgx.hopto.org:5552

Mutex

19cb0d51f6ccd969c2d64e6b68b1fc01

Attributes
  • reg_key

    19cb0d51f6ccd969c2d64e6b68b1fc01

  • splitter

    |'|'|

Signatures

Files

  • 1a3f1ea6b4b990b1c1743d13d1865a07.bin
    .zip

    Password: infected

  • 3e99cae52ebb2886befe137be1d5149c4b788e2e808719172b0fabd60b56503a.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections