General

  • Target

    x5c0nbtB9z0G.exe

  • Size

    32KB

  • MD5

    4b451f55b91f3ae204a72318241d7039

  • SHA1

    23a8154984c68b94849ccd8285f40ab1c35527ee

  • SHA256

    540d2766cb07a2966c269e3aa400ae7817452eefb9d21f1c757b9579ae82f414

  • SHA512

    4dc9fca70f2727700f02367681e6db9386cb4df21870b3cc30af2c4b49d25ea3d50d27d61ae3f7fd6985485dec02e061b9a5aa92329069df8b0c46e2a53ff5cb

  • SSDEEP

    384:C0bUe5XB4e0XuOPhiaXLilpknDAWTEtTUFQqz9yObbi:bT9ButkaXWlZwbi

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

newintento777.duckdns.org:5554

Mutex

698a7b2933b54d

Attributes
  • reg_key

    698a7b2933b54d

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • x5c0nbtB9z0G.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections