Overview

overview

10

Static

static

10

Server.exe

windows7-x64

10

Server.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8799faa67ea6a57c575d4981c0141d4e_JaffaCakes118

  • Size

    72KB

  • MD5

    8799faa67ea6a57c575d4981c0141d4e

  • SHA1

    dcb69fac36507cd56c6b39e0e9d938d360d5632e

  • SHA256

    280fddec307e254eeec3dbdde416cdeb4dcb1bf3109a831c53a187416edee434

  • SHA512

    de4480b3e2442e2619628f7810a18b62fceaf2777adafe0d1a0359326b861497db72a722650159b10df88c11cd00f61bb98868994af55753df22a3f3e0f30bc6

  • SSDEEP

    1536:Ex+QkioPe/OJmOkSZ68vo/1qQNmvQ0lnanB4vUT5aH4Id2+:EQVe/OJTkS9y1yQ0lnanB4u84Id2+

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

127.0.0.1:1177

Mutex

212683d986fb740ad6a40184df48e604

Attributes
  • reg_key

    212683d986fb740ad6a40184df48e604

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8799faa67ea6a57c575d4981c0141d4e_JaffaCakes118
    .rar
  • 13081890_253402641714096_558499780_n.jpg
    .jpg
  • Server.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections