General
-
Target
bRAH.exe
-
Size
32KB
-
MD5
7f9385f6d43f92644396b4332aa92e03
-
SHA1
282d0a0a5a3e7777a5e688a444058b824aa48b20
-
SHA256
9ac552edfd3efac284b13c278deb3c6341bbb391b02ed6b1db5ef427de656e36
-
SHA512
828980ac0f2234602eaa63ffabd44fdc5687f98db3782619fd8bab7fb97de634f826ed9edfd75c6f7ae777cbad44e48baa3777ed85d799bb32207ad79748140d
-
SSDEEP
384:70bUe5XB4e0XspOjfqSjgkMXWTBtTUFQqz9jObbV:4T9Bu9jiSje+9bV
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7NC
Botnet
NYAN CAT
C2
servicios-cne.duckdns.org:2054
Mutex
23474e64527f
Attributes
-
reg_key
23474e64527f
-
splitter
@!#&^%$
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
bRAH.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections