Overview

overview

10

Static

static

10

bQhl.exe

windows7-x64

1

bQhl.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    bQhl.exe

  • Size

    32KB

  • MD5

    6e883bbb4501d4f4fa1d2c0cdeadea81

  • SHA1

    2a52641f0468cb4f2644ee07b1786ae995c2201c

  • SHA256

    9c775cb02c4555ea5d706a762885aee1bddee17488224841ebaef51efac8ca68

  • SHA512

    06061961fd2362b89ba3c4617c5dae7b23429d4341bf14d97307fb2d253121e8717ea8567f28e25564556726586d4b27d710534bfecc6345f9e113069d521ba7

  • SSDEEP

    384:O0bUe5XB4e0XtgONOSjgkM9WT7tTUFQqz9CObbL:fT9BuRcSjeSsbL

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

20.197.224.91:1098

Mutex

a8e500cf629a49c

Attributes
  • reg_key

    a8e500cf629a49c

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bQhl.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections