Overview

overview

10

Static

static

10

xDYx5EKwB32a.exe

windows7-x64

1

xDYx5EKwB32a.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    xDYx5EKwB32a.exe

  • Size

    32KB

  • MD5

    e1ff69cd895879d95d8ec8f674a0a999

  • SHA1

    5accdcd9b28f9305925d27bb958374f874589f5d

  • SHA256

    c1564ff5e4540accd7921c43bb48e567a92fd432bcf35062faf300bb9fbb7818

  • SHA512

    7ff47ad57bc15548b1b06aff72735fc47bf3779c1f2fc43bee64485e3aba43dbe9b82035bb5cbba883caaeb5dd1bdc057234963e29fb89de632069f37d2e0c78

  • SSDEEP

    384:R0bUe5XB4e0XfOZzw0Q0mS03AWTxtTUFQqzFaWObbV:KT9Bu2C55dPVbV

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

berlin777.duckdns.org:1982

Mutex

0c8a5d77c5ef4

Attributes
  • reg_key

    0c8a5d77c5ef4

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xDYx5EKwB32a.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections