General

  • Target

    x7CwEiB9bHEP.exe

  • Size

    32KB

  • MD5

    ab69b70e4baf03e79cdb4b9cf0986f5d

  • SHA1

    1fd4eac3112192750151ee521bde92e65be74597

  • SHA256

    b888e03d4b4100b022d3350b47ca6b5613bc6d15aa8664ca6b58123682f2dfef

  • SHA512

    1e6b741471b08fdb296595eca19e6cf162c8be3f5e9ba49f667e8e6a462bb729ae1ecc461c10da8bd4aa768256a33182b18902a1f7c8a04e180f98a7e39ef500

  • SSDEEP

    384:I0bUe5XB4e0XGOPnw0Q0mS03VWT8tTUFQqzF7ObbS:9T9BuVI55jdbS

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

asegurar1s.duckdns.org:5050

Mutex

54ab4eb68a5c448ba

Attributes
  • reg_key

    54ab4eb68a5c448ba

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • x7CwEiB9bHEP.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections