General

  • Target

    bTgD.exe

  • Size

    32KB

  • MD5

    d7c04394bb46283a0864b9fb91bfad21

  • SHA1

    412877f8ac083cd533bacd233b51dc7a043417ce

  • SHA256

    492e00c9049e93cdf8681e5cd129cb84e1a8849ad0735ccb2f5b21294678e199

  • SHA512

    b77b13a72f727bb5e547a1062b4302c95102790d359f40b8994c7054a2d8d73dc53a8abcb9a62bf1fef96798e6936f6826dc5be39fa8232acefe92bdb9c45f35

  • SSDEEP

    384:V0bUe5XB4e0XuOVcsw0Q0mS03AWTxtTUFQqzFRObbR:2T9But6555dnbR

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

20.201.119.163:1026

Mutex

ede466d66b444b35b7

Attributes
  • reg_key

    ede466d66b444b35b7

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bTgD.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections