General

  • Target

    39071c7548c879f3fef55f3191c4418b_JaffaCakes118

  • Size

    63KB

  • MD5

    39071c7548c879f3fef55f3191c4418b

  • SHA1

    45f2b28589b0029be0127aa28f6f9f8352d8dbb4

  • SHA256

    5c28c90694adc65b760c6aec8130b7395bc42e9c05e6f30f8b5e42a689ca2b21

  • SHA512

    d65c498ec02565b6f65ef1f30e674b131795c7e2f540cb87f18878c8fa73361a100733d1bf5e2990a5f459bbd53789c6fbdd1d96949d6d659f797571d5285c12

  • SSDEEP

    768:XFG5TP1/plIzxTCfVYAvN1Zvy/QmIDUu0tiUmjWlEWjKxH3ti8uUETsL1Ag7T+dy:Ab1ay/YQVkqjdxEdwLD3iSl

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

127.0.0.1:6522

Mutex

60c28f2ec9c1d3d7f391e11534af955e

Attributes
  • reg_key

    60c28f2ec9c1d3d7f391e11534af955e

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 39071c7548c879f3fef55f3191c4418b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections