General

  • Target

    2fafbf7bba416717eb54de46895b8a8344f68207d0a2742af86a0de74c34b05e

  • Size

    30KB

  • MD5

    dbfd68faa8bb9e3f297cf7cd71b8cdb8

  • SHA1

    242d5094a2bea9716311e9943ca9448a639516e5

  • SHA256

    2fafbf7bba416717eb54de46895b8a8344f68207d0a2742af86a0de74c34b05e

  • SHA512

    027a375052a7bdeab63547f57064591825f3772b0053b73e67e4a7452b875bf3cf507846566e262893b502aa9079a8616ebb43878a9c98a9cf9b0b7bd540dbdd

  • SSDEEP

    384:A0bUe5XB4e0XnOd6ANuiEO0YaHWTgtTUFQqzFeObb6:lT9BuO4guiEYu0b6

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

skype.onthewifi.com:5050

Mutex

d7b57bb578c3434f9

Attributes
  • reg_key

    d7b57bb578c3434f9

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2fafbf7bba416717eb54de46895b8a8344f68207d0a2742af86a0de74c34b05e
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections