Overview

overview

10

Static

static

10

cc checker.exe

windows7-x64

10

cc checker.exe

windows10-2004-x64

10

dimap.dll

windows7-x64

3

dimap.dll

windows10-2004-x64

3

dimsntfy.dll

windows7-x64

3

dimsntfy.dll

windows10-2004-x64

3

dimsroam.dll

windows7-x64

3

dimsroam.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ffd26fdd5b1c692dfba39bc753f8a5ec_JaffaCakes118

  • Size

    61KB

  • MD5

    ffd26fdd5b1c692dfba39bc753f8a5ec

  • SHA1

    5b6fdcc70ab9c5578d497ece5e813fc77d1cb53d

  • SHA256

    25c9d000b42a92daeb66f415dab93a5f6d97fe8efbd7855dc08490c93a06ce87

  • SHA512

    26009ea3ee075210abc38aad6406360982e1f77c4bae7aaef068b7cb62322696aedab557473db351b7355484d03d4fccea6f2282435e4bcc656b8c038117f59d

  • SSDEEP

    1536:NsqY/fdy64EahR6c+AkUyakhC0j1b7HeL8FrQC7hS:+Jc64NT6+ZZgCyv+L8B7hS

Score
10/10
nyan catnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

NYAN CAT

C2

iiiimmm.myq-see.com:55554

Mutex

4fcb39e2a91345ea8d6202f07912a06e

Attributes
  • reg_key

    4fcb39e2a91345ea8d6202f07912a06e

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • ffd26fdd5b1c692dfba39bc753f8a5ec_JaffaCakes118
    .rar
  • cc checker.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • cc dork.txt
  • dimap.dll
    .dll windows:5 windows x86 arch:x86

    469e31fbcb0cceedc5dbfe00ddb0c612


    Headers

    Imports

    Exports

    Sections

  • dimsntfy.dll
    .dll windows:5 windows x86 arch:x86

    0f1fc30bf49f7faddc0f3241c2f8ff4a


    Headers

    Imports

    Exports

    Sections

  • dimsroam.dll
    .dll windows:5 windows x86 arch:x86

    4c2e2bb76b94f023d19fc83df8b01168


    Headers

    Imports

    Exports

    Sections