Overview

overview

10

Static

static

10

bPVg.exe

windows7-x64

1

bPVg.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    bPVg.exe

  • Size

    32KB

  • MD5

    8ccf0e9fe704669ec176ad4cf61a142b

  • SHA1

    35709883d7061bdf7a141c009776fcf58c095621

  • SHA256

    1fa639eabee2f78ff66149b47b990f4db00a91d36a3fbc5c087dfe56dfcb825c

  • SHA512

    7f3dd0c1d398be56abd4ab45cfe27819ec900f8e90a7ac51e24f77c0b3426e99d7b00af031ec6832b5e135925c046037d8d2d239d2a91b4b6c382cf908a73812

  • SSDEEP

    384:I0bUe5XB4e0XaO3fw0Q0mS03AWTxtTUFQqzF1ObbJ:9T9Bupo55dbbJ

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

20.197.224.91:1098

Mutex

ee9739283ae249

Attributes
  • reg_key

    ee9739283ae249

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bPVg.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections