njrat | ff00a7414edad0eeb2ce1e7e9919e7a635a5c1621246e91c5bf9e51778156bb8 | Triage

Sharing

General

Target

2dd9a5a8e64c1f5864554d1d2203c4a4.bin
Size

32KB
Sample

221203-ag1qtabg3z
MD5

2dd9a5a8e64c1f5864554d1d2203c4a4
SHA1

f43093cc758e83b6673505ef1faaf4ec2e4a8d57
SHA256

ff00a7414edad0eeb2ce1e7e9919e7a635a5c1621246e91c5bf9e51778156bb8
SHA512

43a3c52b897af7f055bfb92cb2c781f0087ea5b5326cbf6b28df0411669493f07edd9e0e6056b4433f393c94a7b73ff856f58d2d3a9d55eda033028ddddee488
SSDEEP

384:N0bUe5XB4e0XuOdTixBr/QdWT6tTUFQqzFWObbK:eT9ButdifrYnIbK

Score

10^/10

njrat nyan cat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

segundito22.duckdns.org:8888

Mutex

8d56ae4138ea4

Attributes

reg_key
8d56ae4138ea4
splitter
@!#&^%$

Targets

- Target
  
  2dd9a5a8e64c1f5864554d1d2203c4a4.bin
- Size
  
  32KB
- MD5
  
  2dd9a5a8e64c1f5864554d1d2203c4a4
- SHA1
  
  f43093cc758e83b6673505ef1faaf4ec2e4a8d57
- SHA256
  
  ff00a7414edad0eeb2ce1e7e9919e7a635a5c1621246e91c5bf9e51778156bb8
- SHA512
  
  43a3c52b897af7f055bfb92cb2c781f0087ea5b5326cbf6b28df0411669493f07edd9e0e6056b4433f393c94a7b73ff856f58d2d3a9d55eda033028ddddee488
- SSDEEP
  
  384:N0bUe5XB4e0XuOdTixBr/QdWT6tTUFQqzFWObbK:eT9ButdifrYnIbK
Score

1^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2