General

  • Target

    bUrQ.exe

  • Size

    32KB

  • MD5

    1fedb4cab84f1f400516354df3f22652

  • SHA1

    7a4a7e082a9ff7cc1317624565fbf83ca99bdd9f

  • SHA256

    eaa96c58f2e46c920ccca77cec3f195cb3be4b035df67eda3aef8a39176f532c

  • SHA512

    000a96f3dc5935e3d0db7af37a3a619cba8923c64811920ee112fbdc76d05cff8dde29a83a172cd86c7bbc13d9348254d57a46fe6b551fa2ca40737135717231

  • SSDEEP

    384:G0bUe5XB4e0XqOzDw0Q0mS03LWTOtTUFQqzFfUoObbG:HT9BuZ455HiUPbG

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

20.206.240.63:1024

Mutex

3129cd63c193

Attributes
  • reg_key

    3129cd63c193

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bUrQ.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections