Overview

overview

10

Static

static

10

bPbV.exe

windows7-x64

1

bPbV.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    bPbV.exe

  • Size

    32KB

  • MD5

    93c9932bb4d7694d7faf034c774f69ec

  • SHA1

    b31df13c384b1995ecce8588cc1a9e49b44a2226

  • SHA256

    4af08d67c5c9aa9287b61632223f0dfb2784e37469aa2aac2f47b62a59508bc6

  • SHA512

    f5ada3c7c084552a5717d1cf1b00484b5201993f2b6c922a23f25170eff6596e1110b1843463131f3cd8c2636664982d7bd336eb7fecb2168bb78d4e554e6047

  • SSDEEP

    384:d0bUe5XB4e0XuOluixBr/Q/WTEtTUFQqzFPObbu:OT9ButMifrYbBbu

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

tiagoodiaz.duckdns.org:1994

Mutex

37d4a7661fdc462993

Attributes
  • reg_key

    37d4a7661fdc462993

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bPbV.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections