General

  • Target

    x38kbgLd6bPu.exe

  • Size

    32KB

  • MD5

    3ff59e9ee616d6294b561a99d8e67940

  • SHA1

    cd0ae3d6a1bd3d464ff48bf4c1240ccc5104496b

  • SHA256

    991ffd2fe1920b738ca00d2f828de831148717207836e251a127a32affaf09c4

  • SHA512

    313dd453cbb3c4b97d95a3487b83da3e224732b54f52242b4c4617a1eea2018e049b39bac54c2dc4e3853a1bc8eb3cc94f7dc9870dcaf1f0fd6fc5e16f5fdcd1

  • SSDEEP

    384:60bUe5XB4e0XrOnPw0Q0mS03AWTxtTUFQqzFkObbZ:jT9BuSI55dmbZ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

rusia.duckdns.org:2020

Mutex

91f5de285c9a490ba6

Attributes
  • reg_key

    91f5de285c9a490ba6

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • x38kbgLd6bPu.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections