General

  • Target

    1ead7491653af26553b4ef5b98927b4f.exe

  • Size

    32KB

  • MD5

    1ead7491653af26553b4ef5b98927b4f

  • SHA1

    fa6bc1ae12de623bda6e751cd2da66c8f69a70ad

  • SHA256

    3510b8077be532163ad76a93b6043e8490893df56123a36804c2dd856a8d385c

  • SHA512

    201b10da62588e1a8479901c862509eb0d4f3865bb6bd61d405851f5c39b4ec64c998d6bb8976643315ec1697d75b165c96fd23501adbe61c086acebcfba517d

  • SSDEEP

    384:L0bUe5XB4e0X7OxBIQgYbr9pLWTUtTUFQqz9+Obby:oT9BuCPIQVbJ/cby

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

milla.publicvm.com:5050

Mutex

a0165ac6dc81

Attributes
  • reg_key

    a0165ac6dc81

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1ead7491653af26553b4ef5b98927b4f.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections