General

  • Target

    5c63af9091c0e836e46ad988a01d041c_JaffaCakes118

  • Size

    14KB

  • MD5

    5c63af9091c0e836e46ad988a01d041c

  • SHA1

    a4f8be7956284599f1d6970fe553464a5bf1dee8

  • SHA256

    43230e85357480bfb0c3c8d224f77eda19445f4d819bdccdff664219e2a55ab6

  • SHA512

    89bf820909718f8ced748fbe88f9c9908c3842fda95fcf2544bdd9fb8e389c8765dcdb1b4c28dab4d494df39796ed925e80e55f9bbdd7d3f62f3970b5ec70ad4

  • SSDEEP

    384:j0/6L1xh2zjVTspwpvg5c4y6A74cLFrUt3yF1s9MtspB7:A6xxh2fVN5b6taJ+3yPJw

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

ТО С ПОМОЩЬЮ ЧЕГО МОЖНО УЗНАТЬ,ЧТО ТЫ ПРИЁМНЫЙ

C2

188.162.229.70:6522

Mutex

63b84e64477d831d80faa8063cd1fb69

Attributes
  • reg_key

    63b84e64477d831d80faa8063cd1fb69

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5c63af9091c0e836e46ad988a01d041c_JaffaCakes118
    .rar
  • exe.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections