Overview

overview

10

Static

static

10

b77fbbcc5d...18.exe

windows7-x64

10

b77fbbcc5d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b77fbbcc5d126964cd618dac93cb5d55_JaffaCakes118

  • Size

    31KB

  • MD5

    b77fbbcc5d126964cd618dac93cb5d55

  • SHA1

    d35320e71ab1370604904e5f29d0905cd95f5a78

  • SHA256

    5feb56064ea1fe2c630ffcb374d3368d43e230b6df7b96730137275f33406eec

  • SHA512

    6f9e61941d35d36058e490be3236dcbd4155a3f662b7a97aedfebb56ffcec1f3fe1555691b6951549368a3ff9835eb4d3e8dcacc614f4c79c22e5a5479ec4aff

  • SSDEEP

    768:QL5bgJZLrGzxhucehaqHjhvvKnQmIDUu0timIPj:MUKgRRkQVkxOj

Score
10/10
explorer.exenjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

explorer.exe

C2

192.168.31.81:6522

Mutex

973ba3a1fb654ca785f96e0a77181889

Attributes
  • reg_key

    973ba3a1fb654ca785f96e0a77181889

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b77fbbcc5d126964cd618dac93cb5d55_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections