General

  • Target

    a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe

  • Size

    32KB

  • MD5

    d20a2f488e6b5c20cd8ada381358ce55

  • SHA1

    5cced3a6cb0f9938bcfa6fc60e10a926f06c274a

  • SHA256

    a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764

  • SHA512

    d7a6ebbcf80fe19fa051772bd2555296104dd64f0033b107d1b5f7e64e4e1d7af4d08a665e62351152e70905c49869fbaf1f9ebcb72e4590252ac1f172d2b407

  • SSDEEP

    384:V0bUe5XB4e0XWOhaixBr/QHWTUtTUFQqzFxObbs:2T9BuFMifrYrHbs

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

newintento777.duckdns.org:5556

Mutex

8cea1a13187e4

Attributes
  • reg_key

    8cea1a13187e4

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections