njrat | bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643 | Triage

Sharing

General

Target

bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Size

32KB
Sample

240612-clmqvsydpr
MD5

586aef0f1cdbfe27b87a3950f6455013
SHA1

e720397ab8c44d50a7fb9597442896acf4668c55
SHA256

bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643
SHA512

df0a2e39d935154191a2b28e9dff2317297aed2ac2bc1641c7fed15298a9ce51134f8c5b7fd9217060518ef3766f5fb83c6de8bcbb369527f4227342adcc9ed6
SSDEEP

384:k0bUe5XB4e0XOOVcVSjgkMeWTQtTUFQqz9uqObbg:hT9BuN6VSjeetJbg

Score

10^/10

njrat nyan cat

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

nuevos2024.duckdns.org:2054

Mutex

797837af7f

Attributes

reg_key
797837af7f
splitter
@!#&^%$

Targets

- Target
  
  bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
- Size
  
  32KB
- MD5
  
  586aef0f1cdbfe27b87a3950f6455013
- SHA1
  
  e720397ab8c44d50a7fb9597442896acf4668c55
- SHA256
  
  bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643
- SHA512
  
  df0a2e39d935154191a2b28e9dff2317297aed2ac2bc1641c7fed15298a9ce51134f8c5b7fd9217060518ef3766f5fb83c6de8bcbb369527f4227342adcc9ed6
- SSDEEP
  
  384:k0bUe5XB4e0XOOVcVSjgkMeWTQtTUFQqz9uqObbg:hT9BuN6VSjeetJbg
Score

1^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2