General

  • Target

    bPyg.exe

  • Size

    32KB

  • MD5

    536e2847d0a6f57a2031098a94690a73

  • SHA1

    e224f1e11b530add7edd3aed142ddf4002f77df2

  • SHA256

    2b7de62d00ecb37238be29cc5523cb2acf4ee09b50e04039efeeb25e20345cec

  • SHA512

    6899fa68e72f438c943ccb7abef5dfe11f77163f8abae85cea4b616a80e29243a7d02f0bcde059c5f2818e9b858bf06c2f4d25a35258eb031959f17aeb1ed620

  • SSDEEP

    384:U0bUe5XB4e0XuOZ/HdqlzkB8N/uWTHtTUFQqzF3Obbbf:xT9ButBdKTlbz

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

4Mekey.myftp.biz:1011

Mutex

cfcfc4ede74345f998

Attributes
  • reg_key

    cfcfc4ede74345f998

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bPyg.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections