Overview

overview

10

Static

static

10

305d5a7d90...18.exe

windows7-x64

10

305d5a7d90...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    305d5a7d908b9d6c99c5367b009ad441_JaffaCakes118

  • Size

    23KB

  • MD5

    305d5a7d908b9d6c99c5367b009ad441

  • SHA1

    440fc4dffa4839a057fe56e208c1a7719395cf38

  • SHA256

    41e16a3ec19884f7c34b1257a06d7b3e9a2a1dba11354081b0a57136c97032bb

  • SHA512

    e06f8b17bdebc1cb08bad0d39f758a53dd0ebc28f52f6bba9f1aef2a1d2859d436bfcd429e60c55a98a5bb75389dcec212ca3e6f4df88c76582042fba8c5c910

  • SSDEEP

    384:CzluBPiZCMfdfSJrQbsLRGSIxYVL46pg/i8BD9BmRvR6JZlbw8hqIusZzZWgU:CcOmhtIiRpcnuH

Score
10/10
patonjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

PATO

C2

kaka200222.ddns.net:1604

Mutex

b7d8ea7d9151c37c324eaa86550b0c07

Attributes
  • reg_key

    b7d8ea7d9151c37c324eaa86550b0c07

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 305d5a7d908b9d6c99c5367b009ad441_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections