Overview

overview

10

Static

static

10

1453dea35b...18.exe

windows7-x64

10

1453dea35b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1453dea35bb0999da71915c5f67aa02f_JaffaCakes118

  • Size

    31KB

  • MD5

    1453dea35bb0999da71915c5f67aa02f

  • SHA1

    bea0bc17d93324afe2de3125e749d32cfc93d62e

  • SHA256

    34fce5dfe31c71df306d1928ee1b230c1fcd6e405372b86c805d55decae90cf6

  • SHA512

    45fbf4def048becdf047d13f079f618b804a37bc6183f49c6a147254e43ec70caf699cd5ab686d23c5f1fd213c2eb950b8ceb3f4110f9465a092ea4aade53b87

  • SSDEEP

    768:/5bSzG1XB9Qzxry13IPf4bxvy/QmIDUu0tiusj:km6ixoQVkaj

Score
10/10
aimwhtriggernjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

AimWhTrigger

C2

192.168.1.106:1234

Mutex

8800635067c4e3ff3eb68b999162adf3

Attributes
  • reg_key

    8800635067c4e3ff3eb68b999162adf3

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1453dea35bb0999da71915c5f67aa02f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections