General

  • Target

    42a01f37ad7b9284671312c98a78a2f96b8aec1d25af8be7780bf1e8a9d64dd1.exe

  • Size

    32KB

  • MD5

    e8b0d769fe5957505bc8a66a8552865c

  • SHA1

    46a5701b39468f7e257287bac2bf9806606936d2

  • SHA256

    42a01f37ad7b9284671312c98a78a2f96b8aec1d25af8be7780bf1e8a9d64dd1

  • SHA512

    c8f679fd7fd148e340c3d5650ce91c4204e7aadcdd856287993db950d54241b9b38d0777ded613c71e6036d919ef433dc2f419516d80f72a1b2833a26425fde8

  • SSDEEP

    384:f0bUe5XB4e0XKOFHw0Q0mS03AWTxtTUFQqzFdObbB:UT9Bu5C55djbB

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

192.168.1.7:8080

Mutex

38568b31aac04

Attributes
  • reg_key

    38568b31aac04

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 42a01f37ad7b9284671312c98a78a2f96b8aec1d25af8be7780bf1e8a9d64dd1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections