General

  • Target

    a0d362e2231e016ca7a5c976dd1ff93c24477215bb89c0278ad2e375195dd448.exe

  • Size

    32KB

  • MD5

    e155fcf699717e191f485caf9b9a2009

  • SHA1

    78b3a1f44b022585cdd3bfd7a2f67c2a87c32efb

  • SHA256

    a0d362e2231e016ca7a5c976dd1ff93c24477215bb89c0278ad2e375195dd448

  • SHA512

    b002d04db7e56d5df305a9d4fbf36706a2fbbd0aef8ace573bc26a94cf799e7fb584d18db2f7806f2c4ad1dd93cfc9593cb706b1fa9de736510204dd0cb8aad8

  • SSDEEP

    384:E0bUe5XB4e0XtgONvw0Q0mS03AWTxtTUFQqzFKdObbJ:BT9BuRC55dObJ

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

127.0.0.1:8080

Mutex

425d7485b27c459a89a

Attributes
  • reg_key

    425d7485b27c459a89a

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a0d362e2231e016ca7a5c976dd1ff93c24477215bb89c0278ad2e375195dd448.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections