General

  • Target

    bTZO.exe

  • Size

    32KB

  • MD5

    cfc14dd5705688471afd1c2ab410aaae

  • SHA1

    718ac7f4742f0af12532fb07f461135b655fa69d

  • SHA256

    83c291860ac161eb4b4aa3c121bd579be835bcc565f6328149ab6de19a7cf668

  • SHA512

    53c9e7ccc3d47fd05cd2914bd49ffa0f859c9c9bb5312e099bfdc214876b416bb9022d675f61a91a0f7acb98352c0bc168f203b9fa5b97784267ce61d3afd685

  • SSDEEP

    384:G0bUe5XB4e0XmOdTixBr/QsWTjtTUFQqzFxObb7:HT9Bu1difrYVXb7

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

mistersjsas1.duckdns.org:2025

Mutex

7e60182750fa

Attributes
  • reg_key

    7e60182750fa

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bTZO.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections