General

  • Target

    b47307545c821c03b617776a41df1741.bin

  • Size

    10KB

  • MD5

    ef256f370d7dd1d89401a0b377de1064

  • SHA1

    37a0e1c4f2716db13b40315975aaf46ed27525e4

  • SHA256

    c7b947943359ca51e9dd88ba805734c6293a7443e6b83a4ee721698ee0e21ee3

  • SHA512

    a942129f0617ab44d5dbbd936c0e1be12383d8a384a02ff6c9f8ffc8009b0960b09536b9514316aee4de47f17da9c3dc6f943da5bdaafb18619b52d7fd2983f0

  • SSDEEP

    192:zpUSfe2T2yCMWu/xqp+s2EeFxF9zZFH2j0cytMD7mGixB2rUrgSCkYnx5OEZA:zpUSh2ytZqAs2FLF91FyMt0mGiQURCkt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

rusia.duckdns.org:1994

Mutex

aed0817703934

Attributes
  • reg_key

    aed0817703934

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b47307545c821c03b617776a41df1741.bin
    .zip

    Password: infected

  • 0f2be1e974ae7ee9be5354fbef333e105cce5c25473648e66a67269d560220f4.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections