General
-
Target
bQyx.exe
-
Size
32KB
-
MD5
5b56b79aaeedadc453fd6c6959062921
-
SHA1
7391910d4f88980ca46f5255307477e538d624c4
-
SHA256
36e7a6354dd47aa8ebbf23bdb13b899b6f78dda18b96bfb50d3ffad2ce0fa097
-
SHA512
b1e702dd77e21350795d38a7ad66fec00792fbe45ba67b056dce0cd8768dec3c442d6f71a753259cca81d8bff47bcd482474d31dd59f2b62f11da2ab56177af7
-
SSDEEP
384:y0bUe5XB4e0XmO3KiaXLilpknDrWT7tTUFQqz9CObbl:rT9Bu1paXWlZYbl
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7NC
Botnet
NYAN CAT
C2
20.197.231.178:1018
Mutex
11d9e19bec404
Attributes
-
reg_key
11d9e19bec404
-
splitter
@!#&^%$
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
bQyx.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections