General

  • Target

    Payload.exe

  • Size

    27KB

  • MD5

    66c1f80902bd765c3c0dadd4528ad6db

  • SHA1

    e0e05b7f18d2fee32ff6b8624bcbcc2219c14856

  • SHA256

    2369957b8794510683a46621919a5c4f510e4fbfbffa362c678d211a13d164c8

  • SHA512

    5554d9198a18f984059a500bb7c7a94422bc23153059bea42cb5896129eded8a5dc938a17e6405db2f8a5ff56f6105a44675f7741b3e5b1061ce550745dbd326

  • SSDEEP

    384:LLplYHHeIYTzRRcbg8iEPrthZMVAQk93vmhm7UMKmIEecKdbXTzm9bVhca26Pr6s:ffZxRm8VA/vMHTi9bD

Score
10/10

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

HacKed

C2

paul-positive.at.ply.gg:9693

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

Files

  • Payload.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections