Overview

overview

10

Static

static

10

83c7ff1ebd...01.exe

windows7-x64

1

83c7ff1ebd...01.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    8d153b783c87021dcfbea00799e18337.bin

  • Size

    10KB

  • MD5

    0b9fa2ea3c781338ddff5e4eb4b7f239

  • SHA1

    96721f0f0ae1012c4ae88b5208b809e164594270

  • SHA256

    d265f977436f9b11a4145f4877b979456c4b2921030ef14d6debccae600e8ec0

  • SHA512

    47c878748fe1fb1f72914e9aa25a78b442764ed1c56c2f70be27311f84f22acd339354555d215c8d610bf33a5e3f401137966a7e2011fdc8fe6e0c503e83341e

  • SSDEEP

    192:iSyfGFIWuibcQ7xLKQofaDlt3yo1VLMqUbIiWOrYaoVT4EwJp4F:i86WugcCIQofapt3fLiQWYaoZDkaF

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

rusia.duckdns.org:1994

Mutex

480cbbef1dc

Attributes
  • reg_key

    480cbbef1dc

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8d153b783c87021dcfbea00799e18337.bin
    .zip

    Password: infected

  • 83c7ff1ebde9eea24cb5a82b436fa076dc18296fd4933ae220596716cab27601.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections