General

  • Target

    1730537046a28265099d74997f6aaf573f6441587128b68a620c5fd7396901e33fe86509f2931.dat-decoded.exe

  • Size

    32KB

  • MD5

    be1159a311a95ae71088edc986b697ae

  • SHA1

    d21ddc134844dca1b965720d25a9a59c7e8be5a3

  • SHA256

    e9079fcb427a71278a419eb7e4535c7cd7e2be9ebb79aee8da965b5d19adedb0

  • SHA512

    f3cf88020843dfc83be431db63580ab9463075092fedb54e0b3074c661408549dbe52f788f2352fc89cb075befce4f809bd91d1fb4625aea7a895334ef35a694

  • SSDEEP

    384:j0bUe5XB4e0XyOb7w0Q0mS03AWTxtTUFQqzFeObbt:wT9Bux455dgbt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

104.243.246.120:2030

Mutex

1df325350b784c

Attributes
  • reg_key

    1df325350b784c

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1730537046a28265099d74997f6aaf573f6441587128b68a620c5fd7396901e33fe86509f2931.dat-decoded.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections