General

  • Target

    50210454605.exe

  • Size

    32KB

  • MD5

    ad6122559d2b098ddbac3bf8309d4fc4

  • SHA1

    53824c82f78d4172602ce9ad69e3746cadf46fad

  • SHA256

    a4e3944fa206e146cb252849742e921b433b8076723844dd73d2d3afed17ccb3

  • SHA512

    aca791b3089a70e50a8fe19a864b168a0b6ef93c2ca52be7bb745db241f01d904d4f2adf80d45c87a3f56b7d895b596d0e9a182df82eb42c7069c195d7454dd9

  • SSDEEP

    384:wi0bUe5XB4e0XfODxggUBZIGXWTftTUFQqzFvObbP:w7T9Bu29ggUBZIxFbP

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

dormen.duckdns.org:9000

Mutex

9c14520e23a24a1

Attributes
  • reg_key

    9c14520e23a24a1

  • splitter

    @!#&^%$

Signatures

Files

  • 50210454605.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections