Overview

overview

10

Static

static

10

313bd936b9...18.exe

windows7-x64

10

313bd936b9...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    313bd936b937cb3fe6e1117995c472d0_JaffaCakes118

  • Size

    37KB

  • MD5

    313bd936b937cb3fe6e1117995c472d0

  • SHA1

    434298ef2561f6442b2fdcb6c68ac746e5df39f9

  • SHA256

    ec7befcf764dc46b238b198a0b46d7dcf4294cfea2b4b334a7f811aa7dd5c89e

  • SHA512

    c034c2ec44fa825476435e5a3f09ed9ef0f481a3ffef5379f288e40af772784ae1738cb51e1c6b5e047d89c3561f971367b853cb3d1a450890f4a24be8c31abd

  • SSDEEP

    384:ULgSKMizdjjnBhFbJ8ycPfpXxtwqKVZrAF+rMRTyN/0L+EcoinblneHQM3epzXIV:bSgjlLJfcPfpP9K7rM+rMRa8Num1Vt

Score
10/10
usernjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

user

C2

baja19n.hopto.org:5552

Mutex

e2abdc1ab493a3c52b870dda63b728e1

Attributes
  • reg_key

    e2abdc1ab493a3c52b870dda63b728e1

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 313bd936b937cb3fe6e1117995c472d0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections