General

  • Target

    6673fa66eec77de3323ef9584e7762a4.bin

  • Size

    10KB

  • MD5

    8e91225e92e4bf7751d21991328f390b

  • SHA1

    aa9a587f50cbc2bb7465150e89e63a9f936b5864

  • SHA256

    25d0d855f47cf766d4a2e4719d1ec27362f9f0fd51412c2a79b879999aafbbf9

  • SHA512

    80e6c5fae6fd12c37cf0f01dfb2f226799bb24ee0444d75fc87a5ace9b9a075092aba12707d3af9498ea9674e80c84708557ca967dd43d7625a5c3f897f1730c

  • SSDEEP

    192:bVrNqDnaO5hnsGu+VIJZg3AxeSKt1QEk/dl5S3CvyKmgzdWAfEIO1Jf:5r4Dn93/yJZg3051dlUyaKBh7fENt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

adminazul.duckdns.org:8092

Mutex

b912139eb72c42

Attributes
  • reg_key

    b912139eb72c42

  • splitter

    @!#&^%$

Signatures

Files

  • 6673fa66eec77de3323ef9584e7762a4.bin
    .zip

    Password: infected

  • c5b432c4324414ef5c0d82f53dcc78fd4d613ec43f70f2256a7e5a505f98130e.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections