General

  • Target
    db762e1dae5b35fe09bd2dabe9d3ffc2.bin
  • Size 10KB
  • Sample230824-bgrctaad3x
  • SHA256 d1a691c50eea3cdd764ef42e034f7908d382bd6e657997d41fbe42b1c3127f65
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • njrat

Version
  • 0.7NC

Botnet
  • NYAN CAT

C2
  • resilencia2023.duckdns.org:2009

Mutex
  • 12ea3c8a238

Attributes
  • reg_key

    12ea3c8a238

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • db762e1dae5b35fe09bd2dabe9d3ffc2.bin
    .zip 10KB
  • 93cdc9b2f926d0016cfe88d3eca1baafbe9c376a0ccad2ee9e15d6d600f64def.bin
    .exe 32KB

db762e1dae5b35fe09bd2dabe9d3ffc2.bin

  • SHA256 d1a691c50eea3cdd764ef42e034f7908d382bd6e657997d41fbe42b1c3127f65
  • MD5 SHA1 SHA512 SSDEEP
Password
infected