General

  • Target

    dfdf6e602a96160090c48334031a2574.bin

  • Size

    10KB

  • MD5

    376079a2a8eb091caf37a9943f08ea60

  • SHA1

    a57cbf5b2e3fc165744b98ca8b088725dd6791ba

  • SHA256

    c2e87c7671c6244d6b53d5fb84e7dd09542e5cd5cae37cd3cbd3180b435a4b4a

  • SHA512

    80f245ce4d785a49271a28a99b429fa22cf1b5e9413b0ddd42f0c1a39aadfeb40453d5643621906210c619927be73980b6607c7038b7f45fff827630ed6987a6

  • SSDEEP

    192:m8b7Tak849vzlooY+NBevviWALvRgE1k+i300D9dDsuvtMqtbMlSMx6Hi:mwab45Y+ini5LpRi300HFjMlSMZ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

oficinabogotanor.duckdns.org:8092

Mutex

3a7e792b3b

Attributes
  • reg_key

    3a7e792b3b

  • splitter

    @!#&^%$

Signatures

Files

  • dfdf6e602a96160090c48334031a2574.bin
    .zip

    Password: infected

  • 257d66d9dc5b7e9cc863f241c2375e798634e1fd9e545f374fbd21535999ba13.exe