General

  • Target

    2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe

  • Size

    32KB

  • MD5

    8463c84711f2b74290e2e2d8fe720d3d

  • SHA1

    a24e1b07f17e2d012c775ce675002a5e1e2486c0

  • SHA256

    2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf

  • SHA512

    59773cd41d3d8eab884a7d63944d359d385dc78e3181112a65077382da039f2a519210fdb7d653aadfa566d4b47f22dbcb54d43cb7e6b378289677ced7bf3fbb

  • SSDEEP

    384:y0bUe5XB4e0X+OlCANuiEO0YaBWTetTUFQqzF/mObby:rT9BudYguiEYSwlby

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

njpantalla.4cloud.click:3030

Mutex

d1766f16ee6e47b49

Attributes
  • reg_key

    d1766f16ee6e47b49

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections