General
-
Target
7e121766e1e15b833eced37bd8bac0e8_JaffaCakes118
-
Size
43KB
-
MD5
7e121766e1e15b833eced37bd8bac0e8
-
SHA1
73cec3925cdddfb4ee52e992a4725f3bf2c7a33c
-
SHA256
51f4f99522b25451cdbe601649aff5137aa3c7b5fd5bccfe936a11f5f5b3f62f
-
SHA512
8af4bb23aa70796319c6b7c32a75e1cf4ae70f75aee62cba59d02a3e3dffb68a46cc33784fad730447540994fb6b802e1af1b29d770b373161bfe8a9312aff32
-
SSDEEP
384:RZyP8Bq0lwZmoy7ypUwCwEhxmD0aXzoIij+ZsNO3PlpJKkkjh/TzF7pWnIfgreTn:DTNGol7oUr+DjuXQ/o1f+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
66767
C2
192.168.0.18:6522
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7e121766e1e15b833eced37bd8bac0e8_JaffaCakes118
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections