General

  • Target

    b3da4650deaf97d51532ebe6125f0835_JaffaCakes118

  • Size

    23KB

  • MD5

    b3da4650deaf97d51532ebe6125f0835

  • SHA1

    dd33a3ebeffab005c534fe3d3654a6c5800ae259

  • SHA256

    ce13629daa93a8df690bb29236102255181be16b01c14a1d9727a040871808c8

  • SHA512

    123fae0a284d0f2039833d094ed9caee66712fa19bb863496f144f56e40b128b58bb6006965b746125c52b801bd22170339d26758cffc970587930a0e1690a3a

  • SSDEEP

    384:uweXCQIreJig/8Z7SS1fEBpng6tgL2IBPZVmRvR6JZlbw8hqIusZzZJBbP:JLq411eRpcnuitP

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

bob2030.ddns.net:1150

Mutex

57961f3c5ec03a6edf70d01ccb48bccd

Attributes
  • reg_key

    57961f3c5ec03a6edf70d01ccb48bccd

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b3da4650deaf97d51532ebe6125f0835_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections