General

  • Target

    xxxwsP9yoAsG.exe

  • Size

    32KB

  • MD5

    700f97d8d03c5f1990a890d2faa7ff2a

  • SHA1

    85db6c14e25a3b114642a2f987fff46ed03fc39c

  • SHA256

    182198163b1d17b3d5524bbe792b4546e404c00a5995e5f471371646a632bfe4

  • SHA512

    6cfe8f3e4563d69af01095ba98c6199141b57f44841cc6c69d5278ebea3086ec054febdf9e29d866e0a1b3b560cb7b3091337ae7693804d89d1e8b67a7d03995

  • SSDEEP

    384:70bUe5XB4e0XWOhIQq1pvmufCsIs0WTQtTUFQqz9BObbq:4T9BuFOQqvvmu6dnbq

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

navidad202223.duckdns.org:2054

Mutex

38da644287824

Attributes
  • reg_key

    38da644287824

  • splitter

    @!#&^%$

Signatures

Files

  • xxxwsP9yoAsG.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections