General

  • Target

    05fcd4173b004da4454ff4695634f4b5_JaffaCakes118

  • Size

    23KB

  • MD5

    05fcd4173b004da4454ff4695634f4b5

  • SHA1

    b28b11a910927b745e089c56d1522144e8aa532e

  • SHA256

    59dc2f72ee02234f97da471457d517b10ec14368bf3f9d016b51a1726f475d64

  • SHA512

    0774b26750807e67e947979cff8441cc650808e6392b19dc701ddf2a997e2b88800cb28294c67001981b57f64d3945909b67aeda99b49e5a114e2fdd44f92634

  • SSDEEP

    384:nsqS+ER6vRKXGYKRWVSujUtX9w6Dglo61Z5DVmRvR6JZlbw8hqIusZzZK5:8f65K2Yf1jKRpcnux

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

magi12.ddns.net:1990

Mutex

183e2b877ea5b8bc5742a0e210b9e527

Attributes
  • reg_key

    183e2b877ea5b8bc5742a0e210b9e527

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 05fcd4173b004da4454ff4695634f4b5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections