General

  • Target
    8c66f7abae263de14d58d0d5ee7a1de69b98994eedcdcbbdef9ad2ffea22f475.zip
  • Size 10KB
  • Sample240402-qjakeabd22
  • SHA256 953abb1234586c9f950e942482f5bf77f896c4c9a0d1547f1e8489a0feb55464
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • njrat

Version
  • 0.7NC

Botnet
  • NYAN CAT

C2
  • serverupdated.duckdns.org:5552

Mutex
  • 07779923a5f5469b839

Attributes
  • reg_key

    07779923a5f5469b839

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 8c66f7abae263de14d58d0d5ee7a1de69b98994eedcdcbbdef9ad2ffea22f475.zip
    .zip 10KB
  • 8c66f7abae263de14d58d0d5ee7a1de69b98994eedcdcbbdef9ad2ffea22f475.exe
    .exe 32KB

8c66f7abae263de14d58d0d5ee7a1de69b98994eedcdcbbdef9ad2ffea22f475.zip

  • SHA256 953abb1234586c9f950e942482f5bf77f896c4c9a0d1547f1e8489a0feb55464
  • MD5 SHA1 SHA512 SSDEEP
Password
infected