General

  • Target

    4499bc4d8421e8683e610e9c0e213fe401e0ec5e30b10a0fbcd52f053832ef9a.exe

  • Size

    31KB

  • MD5

    ba1254a44bf7e6d6c77193e605ec9aaa

  • SHA1

    05f00eff418341c8e2eb03e64e0e36b81c857687

  • SHA256

    4499bc4d8421e8683e610e9c0e213fe401e0ec5e30b10a0fbcd52f053832ef9a

  • SHA512

    f43f3e5588cf92d60b2fc4b6c80040e4eb820ed6ad75ca75aa4d82b2e6a8ffdb0ee0776d1efaaa55de2b46ac63970aafb3d684abd60701711198c97d6d933805

  • SSDEEP

    384:A0bUe5XB4e0XnOd6ANuiEO0YaHWTgtTUFQqzFeObb6K:lT9BuO4guiEYu0b6K

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

skype.onthewifi.com:5050

Mutex

d7b57bb578c3434f9

Attributes
  • reg_key

    d7b57bb578c3434f9

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4499bc4d8421e8683e610e9c0e213fe401e0ec5e30b10a0fbcd52f053832ef9a.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections