Overview

overview

10

Static

static

10

922ecf06d7...18.exe

windows7-x64

10

922ecf06d7...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    922ecf06d7dcca09adc74ff773503367_JaffaCakes118

  • Size

    29KB

  • MD5

    922ecf06d7dcca09adc74ff773503367

  • SHA1

    5d331c7fd7b0ce267d353389650f56ed09d07b6a

  • SHA256

    deeebfb738ad12e7297748dc98a353fc27cfd5705e6d7801dd357384ab805c63

  • SHA512

    f6b397c6a5998e91eaba7b016a2c716fc3098c80643b609f654c308e7610b631c9a0002e83585d03e207dcb6a8796f84d6568fa83fdf8253dcd592ad85960fc5

  • SSDEEP

    384:k3qbCKml4hoo9IMVCGpOsjhEv6/ghrrgOpt3xmRvR6JZlbw8hqIusZzZOTFDA8SI:8N0aatpAnARpcnujFsLOO9xDWb

Score
10/10
microsoft© officenjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Microsoft© Office

C2

82.102.229.134:1090

Mutex

6e81135290a3cbb3f16e9591f0e8666f

Attributes
  • reg_key

    6e81135290a3cbb3f16e9591f0e8666f

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 922ecf06d7dcca09adc74ff773503367_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections