General

  • Target

    8ab046221d4c82b7bc8af25d66681f12_JaffaCakes118

  • Size

    31KB

  • MD5

    8ab046221d4c82b7bc8af25d66681f12

  • SHA1

    25f1eeebfa85eed09859013bd16ff95e15b720e5

  • SHA256

    6f206c1cf8a3a89d1c924093ad7b14afaa38bb838cd63f46ac5a6d4aeea917ae

  • SHA512

    f0a5c2a48d7f51b309f7da8faef4dee4a8783684f62cfa9bdd692f96640e8fb8b0df4adfb1bf8f053aaaf768d8fa571137fddc659701183f967eb86d131d9a6b

  • SSDEEP

    768:bX895d5rLmzxBuJl+ue8vtLPvGvQmIDUu0ti0yj:kvK61jQQVk2j

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

178.33.93.88:80

Mutex

6412632678fd7af8e4c57ca548c07ab3

Attributes
  • reg_key

    6412632678fd7af8e4c57ca548c07ab3

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ab046221d4c82b7bc8af25d66681f12_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections