General

  • Target

    47E16F20263A881B3C927C540D7CB791.exe

  • Size

    48KB

  • MD5

    47e16f20263a881b3c927c540d7cb791

  • SHA1

    66df5d5f36d4e5e62791b94e9432aba3228074b5

  • SHA256

    d3d7a380b5cb59c5f7793c552dcc32edfc2281af564172388883bc597856d514

  • SHA512

    be7819ba76f5437acc460c9a9aad3410bd0574bc5fdcf1be2d1e10661733f227445e6b643066ad7f633d83896890c45d20616731feebe0154955bc005b2fdb83

  • SSDEEP

    384:20bUe5XB4e0X+OxWANuiEO0YaHWTgtTUFQqzFGObbe:XT9BudoguiEYuobe

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

seznam.zapto.org:5050

Mutex

f53b82852bd24b

Attributes
  • reg_key

    f53b82852bd24b

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 47E16F20263A881B3C927C540D7CB791.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections