Overview

overview

10

Static

static

10

410e999c74...ec.exe

windows7-x64

1

410e999c74...ec.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a121c08b062c6ad1fe720bccaa16d3f9.bin

  • Size

    10KB

  • MD5

    b08073daad1dae1be0236c5f5cea4504

  • SHA1

    1bf0c912b9627a14df978b3c7fc6fc1f5b1fd688

  • SHA256

    6fa881396d172d6c3d1c15ae05dc40db59984659aac1d8ec191dfcd78860ef4f

  • SHA512

    e527eac90f53d3f2cd4effdc50f2f17aa10c7d8b7f0c9c9063e9c6f63d0f832c598bf5fd2a7855faa40fb3aa4325c53fb21fd9c51b0944e35d89011b64607d6e

  • SSDEEP

    192:Ju5tS+MalgAMZKS3pqiap07s3jSMZUgBxXEkZEHhckQi33ifxnCn:I3ljgAM0S5002+MD+J6/xC

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

berlynm98.duckdns.org:7771

Mutex

16e6be3266

Attributes
  • reg_key

    16e6be3266

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a121c08b062c6ad1fe720bccaa16d3f9.bin
    .zip

    Password: infected

  • 410e999c7495976a0e968dcd03bba00202fd0bd5bfe60f679c0a8836ae5924ec.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections