General

  • Target

    226cdde23de9e826c6e963693f9b379c_JaffaCakes118

  • Size

    31KB

  • MD5

    226cdde23de9e826c6e963693f9b379c

  • SHA1

    a77bf999ed811641d15ea5a0cf20cbdc1a846e14

  • SHA256

    a07f8013ea91a58ba69b188993cf1281b5547f7d36a93749daed1c6bc8525e56

  • SHA512

    d50b7faebf1ba9c221ff2cbae7730a59be0cd35d06464c959b428b83b44e1fa2853752af207f0af47446942e17d5ac49a2a3e1ce928fd37075001093e6179e24

  • SSDEEP

    768:nTMXZwpJbb2zxxO5oaqHhisfvaMQmIDUu0tieuj:wkKZisfQVkUj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

192.168.0.106:7777

Mutex

8f9b967e877a5084160ad979350155fd

Attributes
  • reg_key

    8f9b967e877a5084160ad979350155fd

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 226cdde23de9e826c6e963693f9b379c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections