General

  • Target

    3f171a70aa41a7ed35f478a8a4e7cdaf_JaffaCakes118

  • Size

    37KB

  • MD5

    3f171a70aa41a7ed35f478a8a4e7cdaf

  • SHA1

    113e61943a4b0b140fac027259157065b5d1d69e

  • SHA256

    d169973b1243af06c1ac39008833f37dde4a324b5718adf56b373d69f2477b69

  • SHA512

    ca10671ecedd2aa55aa4f299f00ee0a16c9073bff6ffd6ea17b77d62c7802f12d4fcca6750256d10257932e3d86f01415cf16765ed1fb215a6b37ca4836ce99d

  • SSDEEP

    384:SI8vEiTbTvpWNcZ0y8fvCv3v3cLkacJEJrAF+rMRTyN/0L+EcoinblneHQM3epz9:187TZ38fvCv3E1cUrM+rMRa8NujLRt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

82.202.167.194:1018

Mutex

44acb4d786c53ef4af770124b024d21e

Attributes
  • reg_key

    44acb4d786c53ef4af770124b024d21e

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3f171a70aa41a7ed35f478a8a4e7cdaf_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections