General

  • Target
    ee332cae07f061eb5e5ffc5e60dd4300.bin
  • Size 10KB
  • Sample240208-ebct1scgb6
  • SHA256 d5f7527a0fe39690c1f439e25a1d62184bb2ad77d65e35d0ff266e3ba027fab2
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • njrat

Version
  • 0.7NC

Botnet
  • NYAN CAT

C2
  • nuevosecua.duckdns.org:2054

Mutex
  • c1a86313623c4b

Attributes
  • reg_key

    c1a86313623c4b

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • ee332cae07f061eb5e5ffc5e60dd4300.bin
    .zip 10KB
  • 8e9629451b8a090834f96bd6688184ad7a18aacd33784193f273c7796e3c01b3.exe
    .exe 32KB

ee332cae07f061eb5e5ffc5e60dd4300.bin

  • SHA256 d5f7527a0fe39690c1f439e25a1d62184bb2ad77d65e35d0ff266e3ba027fab2
  • MD5 SHA1 SHA512 SSDEEP
Password
infected