General

  • Target

    4e5ded274678eb23a00ebdd9c03de6d04467a6452275ce76f0224a067f241917.exe

  • Size

    32KB

  • MD5

    9c6fc32105a731933b746e9afeef2850

  • SHA1

    17485a1246b682835aa717d4945e6cedae3dfe8c

  • SHA256

    4e5ded274678eb23a00ebdd9c03de6d04467a6452275ce76f0224a067f241917

  • SHA512

    8850432e806682d40c64f7d1399b35dbfde180d677b17f4dc705294ffcac755cfa6893b6441fa45bea648093020aec602ec49534a64b804be7929eb492f17304

  • SSDEEP

    384:70bUe5XB4e0XWOlWggUBZIGZWTRtTUFQqzFrObbJ:4T9BuFwggUBZIBxbJ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

newnano-shel.duckdns.org:5552

Mutex

80dfdb72f52c47e7

Attributes
  • reg_key

    80dfdb72f52c47e7

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4e5ded274678eb23a00ebdd9c03de6d04467a6452275ce76f0224a067f241917.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections