General

  • Target

    836-55-0x0000000000290000-0x000000000029C000-memory.dmp

  • Size

    48KB

  • MD5

    5c63f2d044398ca724e6c3d3ff5b69e6

  • SHA1

    e2bbf95a4de5382c8496225e9847e73451f015fe

  • SHA256

    8b3b08a56bd41c53c1d93ab447354e58cc15a9aabf4520e7f23e3375481b4e84

  • SHA512

    2823147737ad106dae2abc7454b00d2f207a35d1019b997ede9bc68784bc507b2eec5cc440bdcc83c0aa68443e69e73cd018042ece77241fedcbe6a0a139e6ca

  • SSDEEP

    384:s0bUe5XB4e0XmO3wc6WQzwWTntTUFQqz9qAObb3:5T9Bu1AcrQxJb3

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

seznam.zapto.org:5050

Mutex

6cb5de0e268

Attributes
  • reg_key

    6cb5de0e268

  • splitter

    @!#&^%$

Signatures

Files

  • 836-55-0x0000000000290000-0x000000000029C000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections