General

  • Target

    76bd193c0535e6109143d35950e045e03fb25c4ab8419ca6fa69c4fbea4cd085.exe

  • Size

    32KB

  • MD5

    cbe87d6abf69bdd3877821f493e6f6b1

  • SHA1

    4099bc3848634a8d5ca58cd8c0fe029748b368e9

  • SHA256

    76bd193c0535e6109143d35950e045e03fb25c4ab8419ca6fa69c4fbea4cd085

  • SHA512

    3c762fe9283dea8e9b007d477e0e979dd157bc271e8da4b68e5af8762245d0335283284eeec90246c767e9c31f8e456871ecfe392b350c6236be83819dcb4a5a

  • SSDEEP

    384:h0bUe5XB4e0XvOb7w0Q0mS03AWTxtTUFQqzFzObbt:6T9Bum455dRbt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

patria.duckdns.org:1994

Mutex

4ee9f9af7e9

Attributes
  • reg_key

    4ee9f9af7e9

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 76bd193c0535e6109143d35950e045e03fb25c4ab8419ca6fa69c4fbea4cd085.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections