General

  • Target

    2096660x00000000005D00000.dmp

  • Size

    48KB

  • MD5

    e9a6df7ff5d0c3c933a51caf07ad96a9

  • SHA1

    cc7957d2495e88f4a961d621a6a562529b992dcd

  • SHA256

    545bef357cd98cedba7ca6475e08b484999ad4c0b748b0bc05447e313e17b908

  • SHA512

    330779d68b6b2e9098dd4de904ea201c1060bbc8d8b9b01f797987a6995884a95d4ba43ac54e296a31ea6dda62e04257c259b978995df1e2a3c5baf9171aa894

  • SSDEEP

    384:kYaZYC9tSBn6t3emiO060gDVQ6HghQSFJ7tmRvR6JZlbw8hqIusZzZJ4:+Y+q/mlHPRpcnud

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Hallaj PRO Rat [Fixed]

Botnet

HacKed

C2

212.ip.ply.gg:17869

Mutex

3db336165e398a08b41714abba10e742

Attributes
  • reg_key

    3db336165e398a08b41714abba10e742

  • splitter

    boolLove

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2096660x00000000005D00000.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections