General

  • Target

    3d35bceafb5cab4a90a4ba4eafefd56f_JaffaCakes118

  • Size

    23KB

  • MD5

    3d35bceafb5cab4a90a4ba4eafefd56f

  • SHA1

    81d50434668966e3ec889821c90d99791f7ace99

  • SHA256

    6a7c7b24cbbb9edd01babb07ee6f178e1055ae6a5c2003a769a74fcd2d7fe392

  • SHA512

    001d2cda6d450c61672e1748052278a3309e46a3b2b78e1f86b2ceb75c77d86ed38c9f13e3d582a10b1099f3fa2aff0bb439e29bd4d04b6f32c5b5398678c412

  • SSDEEP

    384:QQ+ILgIbOprgPsUOSU0kB1kd6dg7GYh/JomRvR6JZlbw8hqIusZzZ1w:bLL6MVU0NRpcnul

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

185.84.181.89:8280

Mutex

438a94fd2391e832c72944eac98e7bae

Attributes
  • reg_key

    438a94fd2391e832c72944eac98e7bae

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d35bceafb5cab4a90a4ba4eafefd56f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections