General

  • Target

    Payload1.exe

  • Size

    27KB

  • MD5

    5eb37cf63c800d9e2f11e3a0b2d10268

  • SHA1

    169955c9c3f97f39e56546f8eda57ff6b81e372b

  • SHA256

    9ea417ed9dea9ef87dc46bb0684a691b77f9cb3b0d2bc3bb09925a2d6ebda97e

  • SHA512

    7c0c4958cef38d049257ed65b4a7d6e468842ac3ec21b8414b78a3233faea32fa8701d139cb854be7b1488c2aad06c643d9a034ca9d85042939089a81d0e07fd

  • SSDEEP

    384:ILplYHHeIYTzRRcbg8iEPrthZMVAQk93vmhm7UMKmIEecKdbXTzm9bVhca26Cr6s:2fZxRm8VA/vMHTi9bD

Score
10/10

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

HacKed

C2

paul-positive.at.ply.gg:9693

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

Files

  • Payload1.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections