Overview

overview

10

Static

static

10

903a16efb5...18.exe

windows7-x64

10

903a16efb5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    903a16efb5671e17bdcd927190f5e09b_JaffaCakes118

  • Size

    446KB

  • MD5

    903a16efb5671e17bdcd927190f5e09b

  • SHA1

    59ec9b5afd0fd9aff54f0ac9e96afc38e574a174

  • SHA256

    f2ff522932dccee0607be36040edcb538f50d072dc80244a2247bb390ed05499

  • SHA512

    64af88e7019413bbfc43cd962986ba74947bf5fbe45c2bdea8dad6ab80e79005810a114020df296c4c4b5626fa33cdf7af205494df7267df3e08ec340c483c19

  • SSDEEP

    3072:Qq420LLUxUa8FDSKc45xUh/wKsRNwD0kHRoqVi2rhTJNam5zpP4XqAtIVVtNlNmF:CLUCa8FDbtUhB8wNHVi2dpgaUIVdrjc

Score
10/10
nomenjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

nome

C2

156.196.182.107:2222

Mutex

c3e40c0783d13e5d49201ec30733cfd5

Attributes
  • reg_key

    c3e40c0783d13e5d49201ec30733cfd5

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 903a16efb5671e17bdcd927190f5e09b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections