Overview

overview

10

Static

static

10

xlwuQNjwg68B.exe

windows7-x64

1

xlwuQNjwg68B.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    xlwuQNjwg68B.exe

  • Size

    32KB

  • MD5

    5c17105bc706c20a5f518b6865a2fa95

  • SHA1

    d408c53ad763f176d21e309725b56e00d7ac1901

  • SHA256

    a68a0d1275a071e01436ccdfa2746c3a6849a108c8c4797b12178c0d2d2a5769

  • SHA512

    44f61ecada5c6aee7abcb095cf424f621f357e743ab1ae413517fac106a585310cbfb811cb987d0644af54e765684b042c2b3b990295fa40968bde31aa771a14

  • SSDEEP

    384:t0bUe5XB4e0XeOllpiaXLilpknD0WTgtTUFQqz9OObbm:+T9Bu9lKaXWlpMbm

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

vbatallafinal24.duckdns.org :0101

Mutex

c9e5df3ad953438

Attributes
  • reg_key

    c9e5df3ad953438

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xlwuQNjwg68B.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections