General

  • Target

    xyMxPOlHzrr7.exe

  • Size

    32KB

  • MD5

    e3f8da8e9022a6e9e77d7accbab2fc9e

  • SHA1

    5364ee7b5131f197bddc745cc2bacb48272c50a2

  • SHA256

    4b54fe5466cde6d4b3082cd5809aa4741c5741ab3bf682c54dd6a07fba2241a6

  • SHA512

    be5ca946c770def4169c27d507bf15b9f6bb4a39336cfc6b49222f8b1bd698467cd380fc52017936857ed061c2825a23d21b7e2d75605ca398ae5420b7efa5e6

  • SSDEEP

    384:M0bUe5XB4e0XXOVFggUBZIGNWTFtTUFQqzF/ObbZ:ZT9BueDggUBZIpFbZ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

rick63.publicvm.com:6857

Mutex

4d93399b28e84

Attributes
  • reg_key

    4d93399b28e84

  • splitter

    @!#&^%$

Signatures

Files

  • xyMxPOlHzrr7.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections