General

  • Target

    xd2fvfOPEIEJ.exe

  • Size

    32KB

  • MD5

    4ae6913ada39467d865105b00161ee7c

  • SHA1

    d9fffc5013ed2f9ebd701ae9772b406d46127595

  • SHA256

    4f359069c151d1dd983fb3a1c0bc68d95f29d32277026d5e229b2ca3e7d554b4

  • SHA512

    438399763019cf54c6728c5ba1ac8f87a325e308fbfea683f6ed87237875c4634cd752a354156179347416a398f0486efee9ebe368175d25223e77a359a41994

  • SSDEEP

    384:F0bUe5XB4e0XGOlluggUBZIGCWTitTUFQqzFmObbQ:GT9BuVl4ggUBZITYbQ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

microsoftdell1.duckdns.org:7010

Mutex

1c903f66e573498e8

Attributes
  • reg_key

    1c903f66e573498e8

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xd2fvfOPEIEJ.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections