General

  • Target

    7557d4d25110dd9da2ec0decf9371c87_JaffaCakes118

  • Size

    43KB

  • MD5

    7557d4d25110dd9da2ec0decf9371c87

  • SHA1

    4c836fc63e4ecb4edef195b11fe467a94a7ce7ee

  • SHA256

    128a3a8ca2f63f12a3f5c52c11635989bc2b3dd14e705b8868817c9bf7623426

  • SHA512

    24de0797d58f68347cee803b7d49df892c1f1ec679df173539d95a5e20978b32b9a657e1c51248dce0ebaab1960708186347f14e4470684e623242301804fe0b

  • SSDEEP

    384:qZyYiFIB+oyitVv0O0EHafIuZzQIij+ZsNO3PlpJKkkjh/TzF7pWnX/greT0pqf7:o2+IliLvDW3uXQ/oq/+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

nanat.ddns.net :1604

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7557d4d25110dd9da2ec0decf9371c87_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections