Overview

overview

10

Static

static

10

f226f0ac4f...49.exe

windows7-x64

1

f226f0ac4f...49.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    864b3c8e64ea774b3d6589749989fe2e.bin
  • Size 10KB
  • Sample230730-b2hw6sfe97
  • SHA256 3c7798d95c805a19166cac86b555457489c8eaed4149e40d8b3f13fb7ab11399
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

  • njrat

Version

  • 0.7NC

Botnet

  • NYAN CAT

C2

  • discord-gg.duckdns.org:5552

Mutex

  • 73ca74d5ad3f43d0a

Attributes
  • reg_key

    73ca74d5ad3f43d0a

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 864b3c8e64ea774b3d6589749989fe2e.bin
    .zip 10KB
  • f226f0ac4fc6ca6fd54afe8831c11092ca211b7acb2ac7de5850ce143dca2b49.exe
    .exe 32KB

864b3c8e64ea774b3d6589749989fe2e.bin

  • SHA256 3c7798d95c805a19166cac86b555457489c8eaed4149e40d8b3f13fb7ab11399
  • MD5 SHA1 SHA512 SSDEEP
Password
infected