Overview

overview

10

Static

static

10

91dfd564f2...18.exe

windows7-x64

10

91dfd564f2...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    91dfd564f2e872a5c9160c223c0bf9ed_JaffaCakes118

  • Size

    37KB

  • MD5

    91dfd564f2e872a5c9160c223c0bf9ed

  • SHA1

    b4830749827a09131fc6ff32aa0e6ab34dbc4512

  • SHA256

    c7acd87f5b38a5e6d6ba52955d47e004a9492f14b1f7b07fded8aaff6deac8ba

  • SHA512

    c18eb99721a3800aae9b6daaf84c55e3fb4b889d412a04a389799616e219cbd94e4a5c54e309632ea630b6c829f7f2d1ca8be09d7318e8914a610e777d887a28

  • SSDEEP

    384:LVK3hUidksXR21cGMy8PIU5fHkFlacBPrAF+rMRTyN/0L+EcoinblneHQM3epzXh:pK3bLGv8PIU58KcJrM+rMRa8NuTtt

Score
10/10
sql servernjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

SQL server

C2

iferuss.ddns.net:5454

Mutex

13f4da54eb6bdd00f81e5dd87548c94f

Attributes
  • reg_key

    13f4da54eb6bdd00f81e5dd87548c94f

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 91dfd564f2e872a5c9160c223c0bf9ed_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections