Overview

overview

10

Static

static

10

x5gJuYmvL7m2.exe

windows7-x64

1

x5gJuYmvL7m2.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    x5gJuYmvL7m2.exe

  • Size

    32KB

  • MD5

    14046869d5b0c158c67f79e9a8e9c69a

  • SHA1

    473e461156b382691e9995bf2b0062c9093b02f9

  • SHA256

    294bf73902a3e6f4d13be2a823f04249f8f8f8754f5bab9090878e2db204f156

  • SHA512

    6adb65e0eebe8b93d68f55909d1c9337d61b9f3bee7c0d6975074125fb3eca937900201739920b6b0f9a339eb0908c1f26f6aa8438a47c410775c30c763694b6

  • SSDEEP

    384:P0bUe5XB4e0X0gONo4GeTWTVtTUFQqz9WObbnb:kT9BuipDWgbb

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

patria.duckdns.org:1994

Mutex

c8db55329f

Attributes
  • reg_key

    c8db55329f

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • x5gJuYmvL7m2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections