General

  • Target

    e316ce7d3df923ae6f974a6caf2d8a98_JaffaCakes118

  • Size

    335KB

  • Sample

    240406-x14yxahd29

  • MD5

    e316ce7d3df923ae6f974a6caf2d8a98

  • SHA1

    283b5f27000e4141fba4c165f37d1c433db4ef14

  • SHA256

    5f5d469f5b449ba38632a0532e827273fb90176b030be7bf1b91ac07c5bd974b

  • SHA512

    174248355de27fab500a5723113cafd11fe697aa5cdea288650c7683069a7708d5cc047c8ed75e33eb7918133ebdb0b916d5fe048e1d9b15372d11a5029b363e

  • SSDEEP

    3072:qb8In4q17MkZNYR7oz6/OyQhYEjaEYLUfh5+u/0a2HBrvyIBfn8+ux221Hl:4Uq1gyVacfh5+CJK+

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7.3

Botnet

Lime

C2

192.168.1.101:8080

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    121245

Targets

    • Target

      e316ce7d3df923ae6f974a6caf2d8a98_JaffaCakes118

    • Size

      335KB

    • MD5

      e316ce7d3df923ae6f974a6caf2d8a98

    • SHA1

      283b5f27000e4141fba4c165f37d1c433db4ef14

    • SHA256

      5f5d469f5b449ba38632a0532e827273fb90176b030be7bf1b91ac07c5bd974b

    • SHA512

      174248355de27fab500a5723113cafd11fe697aa5cdea288650c7683069a7708d5cc047c8ed75e33eb7918133ebdb0b916d5fe048e1d9b15372d11a5029b363e

    • SSDEEP

      3072:qb8In4q17MkZNYR7oz6/OyQhYEjaEYLUfh5+u/0a2HBrvyIBfn8+ux221Hl:4Uq1gyVacfh5+CJK+

    Score
    10/10
    • njRAT/Bladabindi

      Widely used RAT written in .NET.

MITRE ATT&CK Matrix

Tasks