General

  • Target

    bU41.exe

  • Size

    32KB

  • MD5

    0d4930c83a7b48f8a9885d438db4d62e

  • SHA1

    20efd02080a14edf16f27a14a6e73e58cd3a17b0

  • SHA256

    c91d7eeea984c25fd82975c24a181e09751c25d3a97a440f15104ba83768c883

  • SHA512

    55d153cec961ff5845d0b3232f9b36771c532f685ed8f8e4e5220545551201d6b44f4fbfd59711bc6e700df26c3560fcb8ff1acb7611a5cf6e201c392e0a875b

  • SSDEEP

    384:q0bUe5XB4e0XGOd/w0Q0mS03AWTxtTUFQqzF/ObbZ:zT9BuVi55dVbZ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

serverupdated.duckdns.org:5552

Mutex

9961bfbb96c

Attributes
  • reg_key

    9961bfbb96c

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bU41.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections