Overview

overview

10

Static

static

10

50abb68d81...18.exe

windows7-x64

10

50abb68d81...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    50abb68d8188c5b088ea0e45557557bd_JaffaCakes118

  • Size

    23KB

  • MD5

    50abb68d8188c5b088ea0e45557557bd

  • SHA1

    ee219673067306149e0b248456ab9dfc937c78c8

  • SHA256

    b6a14da712e2ff97c693a4c28f377d5bc5619517aadd5e8fd5dbd8dcea7dc1d0

  • SHA512

    d1a2e2b0137e2a8afb3befc18a3c7463c9ea96fe84ebeb64f7bb8093990262e28524b25aeb21b816208313296e88c057e5c7fc0d546499c06d73d082c856e883

  • SSDEEP

    384:zluBPiZCMfdfSJrQbsLRGSIxYVL46pg/i8BD9BmRvR6JZlbw8hqIusZzZi7:cOmhtIiRpcnuf

Score
10/10
fd3anynjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

FD3ANY

C2

ashlkxx2.ddns.net:1974

Mutex

3fbc36cf25408d07c246b73a7b60d3da

Attributes
  • reg_key

    3fbc36cf25408d07c246b73a7b60d3da

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 50abb68d8188c5b088ea0e45557557bd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections