General

  • Target

    a8d353fe68c4d8129cad19385b04bf94.bin

  • Size

    17KB

  • MD5

    3431e868f690de45b05409285eda8b05

  • SHA1

    e869d985ab2ea12e66f6975b0ddba9e5db9e1cd3

  • SHA256

    bb9532c4c1f551755b701d781aeb17530ca72f54db4a08d3a08f3e1b371e2a1e

  • SHA512

    33c602b8885848b6b192c481a0dd235ba4f2ff1a96867628ce4e80fff2c339046a0255955e64f573ec7a33f48eb47481117a652c05d294eca63ae368016cd4a1

  • SSDEEP

    384:MMVHIf57206MzLgaVUZ4y8U+IyG4b+3R3163m+bEEw8D4t:MC87IMWh8UV4KRimRiD4t

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

victime

C2

england-disability.at.ply.gg:4441

Mutex

e1bc01589947839912291841e607b317

Attributes
  • reg_key

    e1bc01589947839912291841e607b317

  • splitter

    |'|'|

Signatures

Files

  • a8d353fe68c4d8129cad19385b04bf94.bin
    .zip

    Password: infected

  • 25e95eb1e3a25afced9c5f161384f54242337b5ab4e542908cc3fc4b125b64bc.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections