General

  • Target

    90301ecb0d7b4272783b8dd8522f2f56_JaffaCakes118

  • Size

    43KB

  • MD5

    90301ecb0d7b4272783b8dd8522f2f56

  • SHA1

    739f7f5ad892866d3398d6bfb779cbb176a6b851

  • SHA256

    da0c02e79883d97c7fea3f9ffa5a0a941e5da1c0d8d497e2be3fc649d611baf6

  • SHA512

    f849961191dbcfbdedfc019d6fbd55f405db0682c3cd7fc1f3687401a3e2c6d0bf264b79380e77c57f430d00b7055a3fd1785727f250cb93fcb570c091754643

  • SSDEEP

    384:zZyxzE1STss7yKSDzGS+qE1rpS2dzsIij+ZsNO3PlpJKkkjh/TzF7pWnX/greT0k:9uok4smKSPGhrrkYuXQ/o23+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

2.tcp.ngrok.io:12461

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 90301ecb0d7b4272783b8dd8522f2f56_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections