Overview

overview

10

Static

static

10

Payloa1d.exe

windows7-x64

10

Payloa1d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Payloa1d.exe

  • Size

    55KB

  • MD5

    64936aed030d26ee9e186dd981a4635d

  • SHA1

    571856affe9d00e9fb6228da3ace608bb3bb548a

  • SHA256

    4a72e900e30aa002a60d3d648b65be613017cff51ba10648ca99c795441f7e2d

  • SHA512

    6baa27c70fa6d6ae874c897bb3e1fdeaae324576e0ce886304b768f20b170fc64d91a1b0d555f41f4ced6bbc44820e441b2034e496e4c304d0cadb851599410f

  • SSDEEP

    1536:E078DnjNxKVCE9+DTwsNMDFXExI3pmbm:J8Dnq8O+DTwsNMDFXExI3pm

Score
10/10
twentyvictemnjrat

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

TwentyVictem

C2

eye-dramatic.at.ply.gg:1874

Mutex

42fb826804c02cc769a7ededc6571050

Attributes
  • reg_key

    42fb826804c02cc769a7ededc6571050

  • splitter

    Y262SUCZ4UJJ

Signatures

Files

  • Payloa1d.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections