General

  • Target

    967a25343133cca18a2504fe0e72befc_JaffaCakes118

  • Size

    31KB

  • MD5

    967a25343133cca18a2504fe0e72befc

  • SHA1

    8c6364ca94efbf04d10b0d343b30fef6d1710eb4

  • SHA256

    c5b9ca089c2acffc7923d79f4250952c643411a627c2f167e123642643842bf7

  • SHA512

    38766a683aaa60734c4b434228934765ceb2108c195d65fb95eb734ee6d2a67982773e4a3152900b60a2747db287a82a72264cff3e7c3b87e9761581ca0af5f1

  • SSDEEP

    768:dqMv+ZW1nRNAzx7SnI1OfoFLhvi0QmIDUu0tiuoj:AMS2a9RLQVkCj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

192.168.0.106:7777

Mutex

f7e76e9c318c3b339e81d87060085be3

Attributes
  • reg_key

    f7e76e9c318c3b339e81d87060085be3

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 967a25343133cca18a2504fe0e72befc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections