General

  • Target

    a3cc718496bf0d49d8670cf7b96c3ae2_JaffaCakes118

  • Size

    23KB

  • MD5

    a3cc718496bf0d49d8670cf7b96c3ae2

  • SHA1

    e48c17ef64d214a77ca09f5b4f4d536d45117db3

  • SHA256

    01db9e9d68255a999fc3dc3f894c0ea31be17692379d736fa5cbe408aa08763d

  • SHA512

    326f4bc36f92c825240125b0f7c5babd178c931c5a64d5411ff87c82f14ecb83852ec5ea06bab298e7ba762dc24ceec3d42a29aa08ce7253cded8ee170ec1a08

  • SSDEEP

    384:i8aLWS0dABLYVq6RxP8MDFF09FK56PgRMmJKUv0mRvR6JZlbw8hqIusZzZbDlo:1Xcwt3/RpcnuSe

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

127.0.0.1:1177

Mutex

212683d986fb740ad6a40184df48e604

Attributes
  • reg_key

    212683d986fb740ad6a40184df48e604

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a3cc718496bf0d49d8670cf7b96c3ae2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections