General

  • Target
    a7704b8b78a8a6876cf1136e341571527b4960e52ce00eb913899ef126044f34
  • Size 10KB
  • Sample240419-vwk9wsbb91
  • SHA256 a7704b8b78a8a6876cf1136e341571527b4960e52ce00eb913899ef126044f34
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • njrat

Version
  • 0.7NC

Botnet
  • NYAN CAT

C2
  • njpantalla.4cloud.click:3030

Mutex
  • d1766f16ee6e47b49

Attributes
  • reg_key

    d1766f16ee6e47b49

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • a7704b8b78a8a6876cf1136e341571527b4960e52ce00eb913899ef126044f34
    .zip 10KB
  • 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe
    .exe 32KB

a7704b8b78a8a6876cf1136e341571527b4960e52ce00eb913899ef126044f34

  • SHA256 a7704b8b78a8a6876cf1136e341571527b4960e52ce00eb913899ef126044f34
  • MD5 SHA1 SHA512 SSDEEP
Password
infected