General

  • Target

    bUBD.exe

  • Size

    32KB

  • MD5

    b0eb1186dec29582d7c86d211e2addf8

  • SHA1

    f8edefa10e35a0434bcb56ba45fcc265b4da6c52

  • SHA256

    d88a3e728153a059a398e01b451767e0fccf2eba9dcfeb6a5fe014363984a1c0

  • SHA512

    d3152ab2ebb76eea8ef99627317e4d9c01aa0cd060089338e6d62fbbc9d374ea282338c111100b430d11aeeb1faa73b973c4ff3473d6c2a66805c453e7fe3421

  • SSDEEP

    384:e0bUe5XB4e0X0gONpQq1pvmufCsIs6WT2tTUFQqz9A+ObbE:PT9Bui/Qqvvmu6V/bE

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

patria.duckdns.org:1994

Mutex

03bf0f5789

Attributes
  • reg_key

    03bf0f5789

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bUBD.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections