General

  • Target

    b5a74ad4ea3736d2e52a4e41687a6deb227542c99df346a0c14bbbe483ac15a0N.exe

  • Size

    31KB

  • MD5

    e9e35ac6fba4292361a89ce798241b30

  • SHA1

    9f028ef4939aed501a6efd4bb2e5674813df89ff

  • SHA256

    b5a74ad4ea3736d2e52a4e41687a6deb227542c99df346a0c14bbbe483ac15a0

  • SHA512

    e571b6d4c93995b991f1ac5fb0ef330b510f1ed77f918870db5b95c7347f49cf5dcd85de819da769337777dab655bc317f5efddd5ad94f2f863a633a920d9dca

  • SSDEEP

    384:A0bUe5XB4e0XnOd6ANuiEO0YaHWTgtTUFQqzFeObb6:lT9BuO4guiEYu0b6

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

skype.onthewifi.com:5050

Mutex

d7b57bb578c3434f9

Attributes
  • reg_key

    d7b57bb578c3434f9

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b5a74ad4ea3736d2e52a4e41687a6deb227542c99df346a0c14bbbe483ac15a0N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections