Overview

overview

10

Static

static

10

bTHN.exe

windows7-x64

1

bTHN.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    bTHN.exe

  • Size

    32KB

  • MD5

    28537d29ec4ae37aecb9f67d5453729a

  • SHA1

    aa8776486469cb2b18e233cb84dd78ac9e36ca5d

  • SHA256

    e5175bedc7e00e2813dfffe045f6707e44bc17e00130986820085fb40b96636d

  • SHA512

    5e572fa146567d32f9c9a7ac823d96e269bdd2c1560240a7b02e99c6babf1a918f788cd0539a2563cff51a383e5a4b187a0c1daf0de80fc4e2e20d0de41ca73d

  • SSDEEP

    384:H0bUe5XB4e0X7OZOlXCpF7r/EWTUtTUFQqzF+ObbU:MT9BuColQegbU

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

ecuaecua.duckdns.org:2054

Mutex

f7824185234849

Attributes
  • reg_key

    f7824185234849

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bTHN.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections