Overview

overview

10

Static

static

10

9eb2ba465b...18.exe

windows7-x64

10

9eb2ba465b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9eb2ba465b718fea2c605ab9603c40f9_JaffaCakes118

  • Size

    23KB

  • MD5

    9eb2ba465b718fea2c605ab9603c40f9

  • SHA1

    85d2932648684db477c08a1176695592f252eebb

  • SHA256

    8841139a2739207235aa3d30d6b9b58bf55ec221d75e48cf254c195e0f87778b

  • SHA512

    fc0e5296d525fbf62d0f1e4e2351fe624dfdf9c9267c3ad7bceb9e57d27b7cdd36a96ba5fa1b534b55f38139948c73ab33afa10e3da6fa52cfe1348b18f34ed5

  • SSDEEP

    384:bslUlEvOEJ8xWwYJOMiOBZEdj1567gtwi5HhbQmRvR6JZlbw8hqIusZzZXN:ceEvwIlLMRpcnue

Score
10/10
usanjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

USA

C2

ronymahmoudn.ddns.net:1177

Mutex

832220c4c39625b7adc0c841e4dbf89b

Attributes
  • reg_key

    832220c4c39625b7adc0c841e4dbf89b

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9eb2ba465b718fea2c605ab9603c40f9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections