General
-
Target
a14adad9dc3399ec2771a7f74ed7d11f_JaffaCakes118
-
Size
43KB
-
MD5
a14adad9dc3399ec2771a7f74ed7d11f
-
SHA1
1beef1d5e8c4c7ed4398ed525b8d562b7c61939d
-
SHA256
493b8b6fc4522f056efea6e98378841e37a30dd4ecae2b398a74fcd9bea422cb
-
SHA512
9e4f70daf5bd92e81602fa018ef67c12d8308fd9a036f0ff065f12971cc3182f8785e88e5a441eb5b48262fad0e4620efd72a8932cfd0231b541fcb4acd1ea8d
-
SSDEEP
384:nZy+NZJxV6Lk8yvqxFVQUElKhespY6zkIij+ZsNO3PlpJKkkjh/TzF7pWn5egreT:Z1ZJxsY5vEFaRKgSuXQ/o8q+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
Q
C2
127.0.0.1:5552
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a14adad9dc3399ec2771a7f74ed7d11f_JaffaCakes118
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections