General

  • Target

    d11cc7508d420994e19a1df2327d313303117948b62d386b00d8120e17666be7.zip

  • Size

    25KB

  • MD5

    c969f7169b9211a95d44bbe5d04fc5ae

  • SHA1

    d4c160dc007b7afbf8039bcaffee804b6c909364

  • SHA256

    aace35ba090a02c5c4710c9b07b7d8e761d10c31326a9ba06a2a9b77d5a6d13a

  • SHA512

    27890cb55e2a08d2b42b246d1b232d05de16fd07c6268147cd213259517e84941de9b3b3321f0ed9efcbc84a8a57d6f3da73222bffa2552683ccafa7dfaaf08e

  • SSDEEP

    768:Y5gTQtOk0jAnLr1cwxLv1yKWvuVu25mSp2:PTcz0jmn1cwdYVGVnmx

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Crypters

Botnet

NYAN CAT

C2

0.tcp.sa.ngrok.io:12257

Mutex

00363c7d18814191

Attributes
  • reg_key

    00363c7d18814191

  • splitter

    @!#&^%$

Signatures

Files

  • d11cc7508d420994e19a1df2327d313303117948b62d386b00d8120e17666be7.zip
    .zip

    Password: infected

  • d11cc7508d420994e19a1df2327d313303117948b62d386b00d8120e17666be7.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections