General

  • Target

    b7957c0b8179a1cd426f7015b0d9e9d8a6c87ebc53eb1d423f1179b4b4e389c5N.exe

  • Size

    31KB

  • MD5

    655dda06661a6451d7e4f1d25cbf9790

  • SHA1

    859e07a14f2573e3eeb6dbe434327ddd629d5ccb

  • SHA256

    b7957c0b8179a1cd426f7015b0d9e9d8a6c87ebc53eb1d423f1179b4b4e389c5

  • SHA512

    bcaa2cb47189897f21c8ae3ab0aa6dd61bc8ec4de4dbbed88b383af54e282e0e227259e71f4a845e87d6ce44e2e3bc7427a3f30c58da99f18f4903d47c562230

  • SSDEEP

    384:A0bUe5XB4e0XnOd6ANuiEO0YaHWTgtTUFQqzFeObb6:lT9BuO4guiEYu0b6

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

skype.onthewifi.com:5050

Mutex

d7b57bb578c3434f9

Attributes
  • reg_key

    d7b57bb578c3434f9

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b7957c0b8179a1cd426f7015b0d9e9d8a6c87ebc53eb1d423f1179b4b4e389c5N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections