Overview

overview

10

Static

static

10

d88a3e7281...c0.exe

windows7-x64

1

d88a3e7281...c0.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    b0eb1186dec29582d7c86d211e2addf8.bin

  • Size

    10KB

  • MD5

    5aac907cb7cfce694e1850298e62a29d

  • SHA1

    f5416aeecde78a4b91b98c188b737d365efde9ce

  • SHA256

    ae264ccf973b4181f09bc49378d688771543b5a8887bb2fc31c0b23f1af1b0d1

  • SHA512

    82ebe1b51415d9bb765515f75477eb13ed0bca6451401af23d8807a451817cc2399a3a4d04a1c70bc708fa3f0c36af29a03e4f6d3cf5cd1f9d3b801761a7788f

  • SSDEEP

    192:0dZkZgbRT6x/DnkLgszxH56Mpv1n7UEoZxl+nr3NRBs36vz:0wG9Omcs9gEW+nj3m3Iz

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

patria.duckdns.org:1994

Mutex

03bf0f5789

Attributes
  • reg_key

    03bf0f5789

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0eb1186dec29582d7c86d211e2addf8.bin
    .zip

    Password: infected

  • d88a3e728153a059a398e01b451767e0fccf2eba9dcfeb6a5fe014363984a1c0.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections