General

  • Target

    5FC70604B15FE5B409DF04BCDC78DF15.exe

  • Size

    32KB

  • MD5

    5fc70604b15fe5b409df04bcdc78df15

  • SHA1

    8c8218c524966f2a54132598c7cc67ac29563224

  • SHA256

    fb3d2abb360e3dc74ee3646ced736247b25c2ead6e2e0f9776565998060bb325

  • SHA512

    c9a30abb5064d0c08a1e7dcfbe2911d179d050bdd6e13bc6e351eca289fbdeb43d29ec2ac0ecbbfb643b9c3de4c17f225717f6c49f0ce6fdbe1f1e4355e40c2d

  • SSDEEP

    384:E0bUe5XB4e0XZOnPw0Q0mS03AWTxtTUFQqzFaObbZ:BT9BuAI55dEbZ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

0.tcp.sa.ngrok.io:15928

Mutex

5446ca950dd141db8

Attributes
  • reg_key

    5446ca950dd141db8

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5FC70604B15FE5B409DF04BCDC78DF15.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections