General

  • Target

    e78c4aabbfa59e6199deb608bd39eba890bf04dfd59a77b9c99589f668d04268.exe

  • Size

    32KB

  • MD5

    c36b1ef4630ed38e50f19d0e8d309f4b

  • SHA1

    25728679b9f7745c025afd56e08930fc07dd2aa7

  • SHA256

    e78c4aabbfa59e6199deb608bd39eba890bf04dfd59a77b9c99589f668d04268

  • SHA512

    6b3e1b8672a725cee89abaf13592f0bf469b040a86153a91196e23262e23d78acc26a4fa9d8218558bb80aa84f68226922f83798390fcf55dad3a3b59232099a

  • SSDEEP

    384:h0bUe5XB4e0X/Olnw0Q0mS03AWTxtTUFQqzFjObbh:6T9BuWC55dJbh

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

omnibeees.ddns.com.br:5552

Mutex

65b12a354a7b4f9e857

Attributes
  • reg_key

    65b12a354a7b4f9e857

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e78c4aabbfa59e6199deb608bd39eba890bf04dfd59a77b9c99589f668d04268.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections