Overview

overview

10

Static

static

10

xHEumhtjdfiG.exe

windows7-x64

1

xHEumhtjdfiG.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    xHEumhtjdfiG.exe

  • Size

    32KB

  • MD5

    4e957eb61227f3df7ec272c3c9633f09

  • SHA1

    d20faa895b5828f60567acd9736cca5d54d4fdb4

  • SHA256

    323b929dfecc1ad83c951e2ade801749abeebca666e77ec11672930a6e44d4d6

  • SHA512

    d757ec9ee74e3a967a481b464f9dfb767817b86138f4bb0ade2a0cd60e159b86725dd13e57268f9bb50cdd8eb2ee58b578aea561fcce37415270a6bb9b468b6d

  • SSDEEP

    384:d0bUe5XB4e0X+OJwQq1pvmufCsIsrWTDtTUFQqz9DcObbN:OT9BudOQqvvmu6JabN

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

promesasalvaro1.duckdns.org:5553

Mutex

b18c5b4032c046e

Attributes
  • reg_key

    b18c5b4032c046e

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xHEumhtjdfiG.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections