Overview

overview

10

Static

static

10

690d9e3707...c3.exe

windows7-x64

1

690d9e3707...c3.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0e033806f3e80c452e64c7c4c90b6c2d.bin

  • Size

    10KB

  • MD5

    5890c3e94cc0045ac376bac5da94de60

  • SHA1

    c2642a5d9e08c40ea02245e46b546a36a36f1d8f

  • SHA256

    b409267b8fbe8e132f6261cc7106fadc299e153f3042bf72c99ab538b04532eb

  • SHA512

    8b3e6681e7bc3e88919e8a27c016887ef5835948be3e0541c08f7e9de09683d2e6478efeeb7df132430bd7e987c12a27bcf89c2eb170f0c47cd2f964c6e8fb16

  • SSDEEP

    192:ap3DJV5AVNdZ1iztKVRThbAPGMMAyPCtM68GgGdKppA3WWrc9zv3dxgByGT:sVIt1CEh8+0yP0Trc5vPgBl

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

tiagoodiaz.duckdns.org:1994

Mutex

ef09072671

Attributes
  • reg_key

    ef09072671

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e033806f3e80c452e64c7c4c90b6c2d.bin
    .zip

    Password: infected

  • 690d9e3707bb18937e5dba980bc33136b6d8220f421c7f38db4229387c552ec3.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections