General

  • Target

    5552191A1007830D69046DA031139AEE.exe

  • Size

    32KB

  • MD5

    5552191a1007830d69046da031139aee

  • SHA1

    f57b2decc8334de93479d0e548ec2244e3081d89

  • SHA256

    3dac681c089267ae9efc5397f51647c1183b249d6dc82101f3ea737f186a1ee8

  • SHA512

    463ce3655f9cfe5d2eae2baaaa7b180f0d3b3db130d1cd72471ef57696ac617f405c749f01ac15f85902200383c9f560cf736afc6bde4639480810898b647a4a

  • SSDEEP

    384:/0bUe5XB4e0XyOpJIQgYbr9pmWTttTUFQqz9KObbL:0T9BuxPIQVbJTEbL

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

20.201.116.50:1024

Mutex

660f0605b9274

Attributes
  • reg_key

    660f0605b9274

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5552191A1007830D69046DA031139AEE.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections