General

  • Target

    3c426a3c33438d9be6cf941a98906dd3992348e8c0288172cb161d495a774bba.exe

  • Size

    32KB

  • MD5

    e1ab360ae5c6d07fee8be1c453e3f410

  • SHA1

    95cfdfecc388a2ba933fa416914d2a27e33eef31

  • SHA256

    3c426a3c33438d9be6cf941a98906dd3992348e8c0288172cb161d495a774bba

  • SHA512

    18063c6f5d00183af68197db4ec034d9787d4fa8727e99dd64dbbef3f6154cfe2012321ad1f9c830b67dfd13c37aefb1ef56beb02b58807e99788c0ef1fe20bf

  • SSDEEP

    384:J0bUe5XB4e0XKOvHw0Q0mS03AWTxtTUFQqzFDObbB:yT9Bu5I55dRbB

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

127.0.0.1:8080

Mutex

31f5f7a39e5a44

Attributes
  • reg_key

    31f5f7a39e5a44

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3c426a3c33438d9be6cf941a98906dd3992348e8c0288172cb161d495a774bba.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections