General

  • Target

    7f1ca96d5c7c9cc6246fb37d4efb6bd4

  • Size

    32KB

  • MD5

    7f1ca96d5c7c9cc6246fb37d4efb6bd4

  • SHA1

    44540a32d0dc743c5d14a827ef658fe495606d92

  • SHA256

    c88356af063fd3ee288050827af8269721404796b0124b939bb9c5464aacb1cc

  • SHA512

    dea58f239ccb2a4a3fe34bd74c672fa563754fd4cf53314d255a433b105c7be351759065b935430bb880c946110eba925c148ec8bb7661bc8d6044ae8efec2cd

  • SSDEEP

    384:u0bUe5XB4e0X+ODCANuiEO0YaaWTVtTUFQqzFEzObb1:/T9BudOguiEYg0b1

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

21aciu9obz2dggfn0acid1319b9bacaf3b6bb.duckdns.org:1235

Mutex

4f32434d5e0345db

Attributes
  • reg_key

    4f32434d5e0345db

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7f1ca96d5c7c9cc6246fb37d4efb6bd4
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections