General

  • Target

    717185d0155273e35ef0c3e4209b7d22_JaffaCakes118

  • Size

    23KB

  • MD5

    717185d0155273e35ef0c3e4209b7d22

  • SHA1

    a8f366a2d23c645d9c375fa4a6b3a4a225017011

  • SHA256

    55ab4a25ebc82efbfeaafd3ca704df8e5b1e14596fe1316f90169b7319a8eb13

  • SHA512

    6985889f84719addf771cec7ce5d32d014da3793a23ba72859766ecbc2d5c97540dfe0c9000977cae0255e4cc48256b64ed8dab365b58c5e88f5b73332c15cc8

  • SSDEEP

    384:BM8aSyS9gB3Y1KIay2X8cLZI6XgxsGJVPpmRvR6JZlbw8hqIusZzZD7:Z589tXvRpcnuY

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

youtubexlarg.ddns.net:1177

Mutex

ff7ceee5cac2d72ae5f91f7ee0db1afb

Attributes
  • reg_key

    ff7ceee5cac2d72ae5f91f7ee0db1afb

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 717185d0155273e35ef0c3e4209b7d22_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections