General
-
Target
bPHF.exe
-
Size
32KB
-
MD5
52884c1cab64fce4ebf6bac9dd66b0d4
-
SHA1
6c764b9f987718bfbdc1be40593aaa7b93dedcf3
-
SHA256
1a2c4455849c0b9c3b3b9a3babe3774b2cf2628ebaf8b10ea555d487b0f7ac93
-
SHA512
cbdccf6c2d3fb4501b88d20b55d24f2b62aafdd47157e684cde77c140aa705e981f03350375395f45cff06732d465d5b06f7a147de217ddbff89113e4023c1d4
-
SSDEEP
384:x0bUe5XB4e0XiODzw0Q0mS03AWTxtTUFQqzF+ObbV:qT9BuBY55dYbV
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7NC
Botnet
NYAN CAT
C2
177.106.210.102:5552
Mutex
80f118d2ccd2480f91
Attributes
-
reg_key
80f118d2ccd2480f91
-
splitter
@!#&^%$
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
bPHF.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections