General
-
Target
5ab296bcf8ab9037d22e068e944f7bb28039affcd2275da4f32466d54062b8ae
-
Size
32KB
-
MD5
c13507b9a2f597ecff10c6ad4ddfa22c
-
SHA1
7995e66356da3238fc4d4d7843a6c724b7039aaf
-
SHA256
5ab296bcf8ab9037d22e068e944f7bb28039affcd2275da4f32466d54062b8ae
-
SHA512
d2f60e5e812c0520ebd70c90040608d1f57e8dbc03b004b94cac6a668ad6a9062d1f63097ae85545f7d74e69152017db0ff8f3cde674c55a1b5632c1cc0922b9
-
SSDEEP
384:S0bUe5XB4e0XuOt8w0Q0mS03AWTxtTUFQqzFMObbp:LT9ButH55dKbp
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7NC
Botnet
NYAN CAT
C2
pedrobedoya2021.duckdns.org:1980
Mutex
cf13c225ff474d45b
Attributes
-
reg_key
cf13c225ff474d45b
-
splitter
@!#&^%$
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5ab296bcf8ab9037d22e068e944f7bb28039affcd2275da4f32466d54062b8ae
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections