General

  • Target

    xVAHkaX9AHh8.exe

  • Size

    32KB

  • MD5

    87393efdc2ec2f56f7b0121e2b221a64

  • SHA1

    fcff8b2c1c56ac14ea94e3a9124d778e6e68113a

  • SHA256

    3e627caf802513a17c4cfb2fe30d0799f8b4f3d7570283a2b0ee45719cb5b531

  • SHA512

    9047f45515bd9df86c00a62d212bc8c1308b67b41c10312a921932bb8b68ed01c73fa22fcb3a7261c2a68792013e58b1a0ce00f4d057028e39f02df9685d4091

  • SSDEEP

    384:+0bUe5XB4e0XEpOjfrw0Q0mS03AWTxtTUFQqzFyObb9:vT9Bu1j855dsb9

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

estesidiosplat.duckdns.org:5050

Mutex

3fe4a0e8705

Attributes
  • reg_key

    3fe4a0e8705

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xVAHkaX9AHh8.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections