Overview

overview

10

Static

static

10

xihwBKCFPQ1i.exe

windows7-x64

1

xihwBKCFPQ1i.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    xihwBKCFPQ1i.exe

  • Size

    32KB

  • MD5

    1ca4496927b605b9219d01f4639c4a00

  • SHA1

    a777e0b298c4e7d969e673da93033b5944ba3e67

  • SHA256

    9664b724abd8cc4dca9dd910bde9f4dc21605332186a8100c25c4f4a0a3e5b47

  • SHA512

    51dcffbaf01990b25c49fb6d673a36d53176c02855cb7db7bbedd12cb50db9fdd61357ea80572df5fde8639062696daa8ef752de9b0fdd668a149a03081f2809

  • SSDEEP

    384:E0bUe5XB4e0X0gONNggUBZIGjWTvtTUFQqzF1Obbl:BT9BuiDggUBZIdPbl

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

mr1963.duckdns.org:2163

Mutex

4cf9c0d460

Attributes
  • reg_key

    4cf9c0d460

  • splitter

    @!#&^%$

Signatures

Files

  • xihwBKCFPQ1i.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections