Overview

overview

10

Static

static

10

5dda1441ba...18.exe

windows7-x64

10

5dda1441ba...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5dda1441ba55de94432b9cbfca1ab8db_JaffaCakes118

  • Size

    23KB

  • MD5

    5dda1441ba55de94432b9cbfca1ab8db

  • SHA1

    d5f9eb1c5ab1ad9ef61dc287ed27496c8059617d

  • SHA256

    329436a3e7cb66f771c413aa20a0c3436136d2df8903d6569c58ba8b8772b196

  • SHA512

    eeb109e8112f2bdbd49d6cd1a8a1bb4bf5a3bbc376101204b0929f11c349b010ae97b5adf270261466387cc97eddb6eebca2c04574e014a8dfa0cb33e91cd2bb

  • SSDEEP

    384:MslUlEvOEJ8xWwYJOMiOBZEdj1567gtwi5HhbQmRvR6JZlbw8hqIusZzZAmF:FeEvwIlLMRpcnuO

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

kaled.kill.me.biz:1177

Mutex

3889809c24531e8175c2c6bd19e20ab7

Attributes
  • reg_key

    3889809c24531e8175c2c6bd19e20ab7

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5dda1441ba55de94432b9cbfca1ab8db_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections