Overview

overview

10

Static

static

10

20d1dd5fff...18.exe

windows7-x64

10

20d1dd5fff...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    20d1dd5fffbe00e92ecd03ef84d4c453_JaffaCakes118

  • Size

    31KB

  • MD5

    20d1dd5fffbe00e92ecd03ef84d4c453

  • SHA1

    78191645fbe8381a65efec83e1d96e14ef9bd8cc

  • SHA256

    5114eefd8d1720dde3195d2ce145ee6d14bf74eae6cb1902d3049dd2b591ee5a

  • SHA512

    1ae4ea038d26b63984e17a692f552410820c9d3fe8b1b51b89619e49269833dbe3e517299a044206c6e38692140ff933ea5eca34cf28a07c7bb0674d7084c9a7

  • SSDEEP

    768:iJkBhG4ODTuzxZ+xviyC8HpDHvivQmIDUu0tiE4j:xc6aD0QVkIj

Score
10/10
qnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

q

C2

192.168.1.3:7777

Mutex

e1be8d1e486c97d8267b021626edf85d

Attributes
  • reg_key

    e1be8d1e486c97d8267b021626edf85d

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20d1dd5fffbe00e92ecd03ef84d4c453_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections