General
- Target 23f6cf5ead6cbb05ec57b80d0809d002_JaffaCakes118
- Size 43KB
- Sample240728-zy4apsvbqk
- SHA256 20aa773ce4d4e0709faeba02937cc789c114e726f6336c1dcd6c206f00514af2
- MD5 23f6cf5ead6cbb05ec57b80d0809d002
- SHA1 707f2904aaaa82baa036144d40cb788861195734
- SHA512 f5540e477585052bed98cb2743426babda58a5f2b8d328e788ec82fa480a37961d233b35845b40949081dbdae595be3454fc6ca298c07f75d47bfdb42b0cd232
- SSDEEP 384:0Zy98P9mvYyJy6vnbjfiKSMewzGeLXl9D9O5UE5QzwBlpJNakkjh/TzF7pWndtSd:CK8PYghGb7t/itvQO+8tK+L
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
23f6cf5ead6cbb05ec57b80d0809d002_JaffaCakes118.exe
Resource
win7-20240704-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
23f6cf5ead6cbb05ec57b80d0809d002_JaffaCakes118.exe
Resource
win10v2004-20240730-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
Njrat 0.7 Golden By Hassan Amiri
Botnet
-
HacKed
C2
-
fackyou.myq-see.com:1177
Mutex
-
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Targets
-
- Target 23f6cf5ead6cbb05ec57b80d0809d002_JaffaCakes118
- Size 43KB
- SHA256 20aa773ce4d4e0709faeba02937cc789c114e726f6336c1dcd6c206f00514af2
- MD5 23f6cf5ead6cbb05ec57b80d0809d002
- SHA1 707f2904aaaa82baa036144d40cb788861195734
- SHA512 f5540e477585052bed98cb2743426babda58a5f2b8d328e788ec82fa480a37961d233b35845b40949081dbdae595be3454fc6ca298c07f75d47bfdb42b0cd232
- SSDEEP 384:0Zy98P9mvYyJy6vnbjfiKSMewzGeLXl9D9O5UE5QzwBlpJNakkjh/TzF7pWndtSd:CK8PYghGb7t/itvQO+8tK+L
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Drops startup file