General

  • Target

    1720820945e1f3427512d3c6e28bdc1352b59f0a6b85b9ba33d17b5d68d69d895f412b1edc220.dat-decoded.exe

  • Size

    32KB

  • MD5

    50fc3bd88b8871050c2395db3486ade5

  • SHA1

    84f986ae08e08a567e960af2c0d167fdba1224a6

  • SHA256

    910a2275f247bbaa7e79a2d1d7cd07cdd29a32176d05df4ee884cfa13821bfb2

  • SHA512

    8058a130b4c72f6ef284a1f10cd247ea59555b67d2ae59b470f3a5962cc7a73ec9cbccd215c74d2ccd71c109a09da19ebf2a60019d09f6e9cd121db3be8383c5

  • SSDEEP

    384:R0bUe5XB4e0XFOZD3pixEpfEWTBtTUFQqzF1Obbx:KT9BucV3piM/bx

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

njas.duckdns.org:35999

Mutex

24631c84ba074ce78

Attributes
  • reg_key

    24631c84ba074ce78

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1720820945e1f3427512d3c6e28bdc1352b59f0a6b85b9ba33d17b5d68d69d895f412b1edc220.dat-decoded.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections