General

  • Target

    83c7ff1ebde9eea24cb5a82b436fa076dc18296fd4933ae220596716cab27601.exe

  • Size

    32KB

  • MD5

    8d153b783c87021dcfbea00799e18337

  • SHA1

    e38881fd2848bcfad84e81eba5695db628f9e985

  • SHA256

    83c7ff1ebde9eea24cb5a82b436fa076dc18296fd4933ae220596716cab27601

  • SHA512

    bd63d270b30fca9153fe49e1e6331d1fd25087817601a79ea14bc2ead47a172661db890c06a95b350386481b6bb08f3a1614c9fb20415b16d21d2e56fb97ceac

  • SSDEEP

    384:20bUe5XB4e0XIgONDixBr/QdWTStTUFQqzFsObba:XT9BuGdifrYfGba

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

rusia.duckdns.org:1994

Mutex

480cbbef1dc

Attributes
  • reg_key

    480cbbef1dc

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 83c7ff1ebde9eea24cb5a82b436fa076dc18296fd4933ae220596716cab27601.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections