General

  • Target

    62562e69384b78f1be287950a8354778_JaffaCakes118

  • Size

    23KB

  • MD5

    62562e69384b78f1be287950a8354778

  • SHA1

    a67f12063d415ed305aacb50237beb6407ef75d1

  • SHA256

    52dc70b727d09c71f68f457546a48f01d78c6b9cd13c04d7c9594c01325ffe3c

  • SHA512

    8c59bfc761c726f6232e751d5013f48a3ab9fc8f5924bfba3ce8bb0e1b9dfa43d12859dff3f2b114f91e8daf0a9f37daf1cddc5b6b8710cec3c59bce88c5e4fc

  • SSDEEP

    384:7C8aLWS0dABLYVq6RxP8MDFF09vK563gRMmJKUv0mRvR6JZlbw8hqIusZzZ8ka:hXcwt3tRpcnuJH

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

279f6960ed84a752570aca7fb2dc1552

Attributes
  • reg_key

    279f6960ed84a752570aca7fb2dc1552

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 62562e69384b78f1be287950a8354778_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections