General

  • Target

    bb9d4ebcc754a7e6cb7536b735d85fdf_JaffaCakes118

  • Size

    37KB

  • MD5

    bb9d4ebcc754a7e6cb7536b735d85fdf

  • SHA1

    62a93b979c2634af2b39520df73249747bbed84c

  • SHA256

    850072b510695bd8649daad557e371b869054361e888d1aa4ffa51cf8e8c7c87

  • SHA512

    e727a8e987da902339c6ceef93e163fedaa8a0a03c5e0784ac919653f0428f8723ebab7d232cef80bd1337956254c4333fba500ee85fdfdc2a80884822e48363

  • SSDEEP

    384:gUG23hUidkGXR21cGMy8Pqq53tGFlymZErAF+rMRTyN/0L+EcoinblneHQM3epzs:JG23ZLGv8Pqq58im+rM+rMRa8NuFgt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

miop.ddns.net:2280

Mutex

18df5afc301de09badbb5fa494c2daf3

Attributes
  • reg_key

    18df5afc301de09badbb5fa494c2daf3

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bb9d4ebcc754a7e6cb7536b735d85fdf_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections