Overview

overview

10

Static

static

10

8d323a4536...18.exe

windows7-x64

10

8d323a4536...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    8d323a45367a76d98851a0e5f2376b19_JaffaCakes118

  • Size

    29KB

  • MD5

    8d323a45367a76d98851a0e5f2376b19

  • SHA1

    c780b2cd55b35eb1b71a5764954f237c8da51dfa

  • SHA256

    d105893828761fbbea46d48ebd3e298838651c0b4a0c14a7ac2d6c0433bcca07

  • SHA512

    b95e3be780d83f7ef79f83f18055a7dbc58d72b817f7f086b9f4e38ee2ddb8dac2bed7cca7dd671e13d9e499b0261b7fa998dfcb6113e2110954fe5ab9be9015

  • SSDEEP

    384:IDos5l7l7EMrof6oyr/5NxrimmqDWD4IePUGBsbh0w4wlAokw9OhgOL1vYRGOZzG:I77GMroynbprsq04IePBKh0p29SgRFY

Score
10/10
facebooknjrat

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

facebook

C2

mamidou123.ddns.net:1177

Mutex

55b3825ee39ada2fcddf7c7accbde69e

Attributes
  • reg_key

    55b3825ee39ada2fcddf7c7accbde69e

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8d323a45367a76d98851a0e5f2376b19_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections