General
-
Target
2f83c5577880a80f07a337b5ac707939_JaffaCakes118
-
Size
43KB
-
MD5
2f83c5577880a80f07a337b5ac707939
-
SHA1
2be3aceb27e29972da3e9310b28d74e07efaa362
-
SHA256
c0b321906f39b60c7505ced31ba18bc4f69605ca593b1dbda96959a26c462326
-
SHA512
0c47458e7078a8d5b123a2c5477de5ac22a060deb07255726ab61808f68d730fdc996174f79c39231e5732d66edea5e04d111cb146f1eef65dfe49691c67f072
-
SSDEEP
384:3ZyudKFIB+oyiB5ZQ6GMrgvIujK9D9O5UE5QzwBlpJNakkjh/TzF7pWna4greT0s:Jk+IliTZj+LvQO+rA+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
system
C2
192.168.0.104:25565
Mutex
Windows Update2
Attributes
-
reg_key
Windows Update2
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2f83c5577880a80f07a337b5ac707939_JaffaCakes118
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections