General

  • Target

    8e81d940f0c8c72157f2eae314456aac.bin

  • Size

    10KB

  • MD5

    fd051dc66a2a543b77352e83d78e1c0b

  • SHA1

    f3b5c268009d292cdce7b5977e9667866584fd44

  • SHA256

    14e1449a93877eec1dddf87977fa518c36bee81c8a67d9672ff4c4e78049a35d

  • SHA512

    dc4af019e39e3540b07d46a9f36f9cb54daee76eef612460be2a8ee1358fe7f955d481f770f24f343b66bc3fcfc32eecb1bee4ff6c1c18b930ca7c0f0cd2e70c

  • SSDEEP

    192:L6TARMb9X+L5bP7rmNPwWYNwOudXLPUJfRzAcxhRRnX:iAGmhaPwMbPUVRrxnd

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

mayo21.duckdns.org:2815

Mutex

13cfda7c51414c06a6

Attributes
  • reg_key

    13cfda7c51414c06a6

  • splitter

    @!#&^%$

Signatures

Files

  • 8e81d940f0c8c72157f2eae314456aac.bin
    .zip

    Password: infected

  • b7b0b7eeec44ec80f82a9bf0a99fe471898e0106a2541ba5eb5a48d7ce3a48be.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections