General

  • Target

    f76ef2edaed60618e98e6c0980f31982158aa0935ab5af0afb1adc5f9072769c

  • Size

    48KB

  • MD5

    a5aa564e0da638f4e0c294171d5059e0

  • SHA1

    86f0830f3c61f281aac4c0f5c5ffb8065efec119

  • SHA256

    f76ef2edaed60618e98e6c0980f31982158aa0935ab5af0afb1adc5f9072769c

  • SHA512

    7a8614801d45135cda300d831943b92d2b1652738d17b847e0e34530ff7c27e2a329db17808a7ad2fc640b81b8f8402672b257de6ba31be1f1e388f1b7c1718c

  • SSDEEP

    384:E0bUe5XB4e0X+OxWANuiEO0YaHWTgtTUFQqzFNbObbe:BT9BudoguiEYuSIbe

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

seznam.zapto.org:5050

Mutex

b23cdbac25cb42

Attributes
  • reg_key

    b23cdbac25cb42

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f76ef2edaed60618e98e6c0980f31982158aa0935ab5af0afb1adc5f9072769c
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections