Overview

overview

10

Static

static

10

1564-3-0x0...ry.exe

windows7-x64

1

1564-3-0x0...ry.exe

windows10-2004-x64

1

Resubmissions

08/02/2024, 16:01

240208-tgh1jsfe91 10

02/02/2024, 16:48

240202-va9qcschel 10

02/02/2024, 16:43

240202-t8rf1achal 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1564-3-0x0000000000880000-0x000000000088C000-memory.dmp

  • Size

    48KB

  • MD5

    00bede03147d9aed0386c7fe69b3ac1c

  • SHA1

    2aa61fb1b2d6e9f371c3fa8fc97fd7dcb64a7f5f

  • SHA256

    caffc990b18133478cd266593351c4a8a39e4c32e868732d0e786a738a94846b

  • SHA512

    6b10b02f2a5541a134d9cd5cac425a6fb84ee3a3edbbfbcb59f9e40e15ce63bbce04fd955028f7270d5fec8cc92d5c1fee7347cfb18286b7b93704dff8f51d7b

  • SSDEEP

    384:X0bUe5XB4e0XHOnNIQgYbr9pfWTotTUFQqz9cObbPwm:8T9BuuNIQVbJjKbPwm

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

milla.publicvm.com:5050

Mutex

c2d7435e0d60496d8

Attributes
  • reg_key

    c2d7435e0d60496d8

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1564-3-0x0000000000880000-0x000000000088C000-memory.dmp
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections