General

  • Target

    be2600ebccd8ec339463b7927783c0465f3cdb2979663478619073b9e1773db0.exe

  • Size

    32KB

  • MD5

    5b2f10435b1931da90208167cd12380f

  • SHA1

    2cb042ea933b1ccffff8ae8cf84cd07641525a1d

  • SHA256

    be2600ebccd8ec339463b7927783c0465f3cdb2979663478619073b9e1773db0

  • SHA512

    a1fe08be1d71643f3022f0e81068f067f4c8732ef36b53e9c5b8d61892897545af91f4c152171d56ceda3b50e39a4710b819d8fc7a56274098011b5554f0b592

  • SSDEEP

    384:90bUe5XB4e0X6OxLw0Q0mS03AWTxtTUFQqzFzObbt:uT9BuJC55dJbt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

192.168.1.7:8080

Mutex

0e288d5e077445f9b93

Attributes
  • reg_key

    0e288d5e077445f9b93

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • be2600ebccd8ec339463b7927783c0465f3cdb2979663478619073b9e1773db0.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections