General

  • Target

    87b0a6a233ea403868b58ac1960ad6799785a06b684c38e5517a9254a544145a.exe

  • Size

    32KB

  • MD5

    00596e7ce8458d41034fe97d6e3a7979

  • SHA1

    99b51bdad912e66ab181b0bedb9d7e8643ae7924

  • SHA256

    87b0a6a233ea403868b58ac1960ad6799785a06b684c38e5517a9254a544145a

  • SHA512

    4276681b4b873aa466e3e4f04accf9dc4410eca8aebeb64a11322936a1304a7379e449af437188ea2d25da5c152b433679a422728b4aca111e31e25fbdfd1c73

  • SSDEEP

    384:20bUe5XB4e0X1gONvw0Q0mS03AWTxtTUFQqzF7ObbJ:XT9Bu5C55dBbJ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

192.168.1.7:8080

Mutex

3111e69309c94ba99

Attributes
  • reg_key

    3111e69309c94ba99

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 87b0a6a233ea403868b58ac1960ad6799785a06b684c38e5517a9254a544145a.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections