Overview

overview

10

Static

static

10

xkf20PEITw7n.exe

windows7-x64

1

xkf20PEITw7n.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    xkf20PEITw7n.exe

  • Size

    32KB

  • MD5

    e296a99ef82bbaabdfcf48112f71ad8d

  • SHA1

    46ef70164d2bb5263fc722679c06f3371b9c301e

  • SHA256

    3fefee9b40937cee06e62b19ff289bcefdbda8cbf3f2bddac230a345dcf9bb0b

  • SHA512

    42b86fe36953794620ed21e5bd0a1afc3ab1ecc502c58482d335c36f1a8859f3af21f81b92627c753e09251fc46af9affe51ea808899a4e1af0c4af3f4c27e9e

  • SSDEEP

    384:60bUe5XB4e0XnOfOLVSjgkMpmWTmtTUFQqz9DObbw:jT9BuOkVSjep0Nbw

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

vbf8989.duckdns.org :8989

Mutex

86753b9253a

Attributes
  • reg_key

    86753b9253a

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xkf20PEITw7n.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections