Overview

overview

10

Static

static

10

20b55ba0a0...f8.exe

windows7-x64

1

20b55ba0a0...f8.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a87c6960c2b0fdbac3e40b7bc72af52b.bin

  • Size

    10KB

  • MD5

    676a7d2af5489cdcbab49ecd901bf306

  • SHA1

    2e2363adada97a1d0e320923b5d1907948e40984

  • SHA256

    5ee7687643e0cc4dc7102443a47dd56f688622b81056ce86a3402b6611a0246b

  • SHA512

    ce35227a56e304cb981f3744711f5c828954bd7ab848e7e1fa66ed0b428e876d2637e7916021fa347b61950ef9747c8724272b0da0b3aa7d092ddf4b8c52fef9

  • SSDEEP

    192:g92N5ww7yW5X89M5HT4bYzAVArX6r0auyZyJ5VLqb9lq8yJW+jOh9f:DwG+M1Ti9VWX6r0aHm5VLWkJW+qz

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

peces.duckdns.org:5552

Mutex

2cb9793364d2454a

Attributes
  • reg_key

    2cb9793364d2454a

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a87c6960c2b0fdbac3e40b7bc72af52b.bin
    .zip

    Password: infected

  • 20b55ba0a0d2e1c4446cb20a305eca1d097e1ce6811542a5c9709c124a417ff8.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections