Overview

overview

10

Static

static

10

497c40d0d2...18.exe

windows7-x64

7

497c40d0d2...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    497c40d0d2b6389595c1c1304d5d3563_JaffaCakes118

  • Size

    43KB

  • MD5

    497c40d0d2b6389595c1c1304d5d3563

  • SHA1

    a9aad00b8fc1397ebbeeec6038d6e854d3bb5ac7

  • SHA256

    97822ec7019c7807920cbd8b987a8da1b0432444e693f84be907ae234d3dbce1

  • SHA512

    6a07a3809b3cbd3208321b56d39e2e01a11751f3c4c0f94bd41f04b4d7e81aa520189b7f9acb9894bc0987ce20a0016af66e75e4fe6c1cd805159a1b63a0e6cd

  • SSDEEP

    384:XZytD4olYxOoyi0mJeg6WMF8cFQPa9D9O5UE5QzwBlpJNakkjh/TzF7pWnb/gre/:p3ouIli00eTT86gvQO+2l+L

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

192.168.1.105:7777

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 497c40d0d2b6389595c1c1304d5d3563_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections