General

  • Target

    b07733aac70a03af8b3f68a569f167fa_JaffaCakes118

  • Size

    23KB

  • MD5

    b07733aac70a03af8b3f68a569f167fa

  • SHA1

    3c48282aa129f5034b278dd5c9bb88d7ef928cbf

  • SHA256

    218d2efe9d6478552ecff4d78981b5337cb5e6c6bcfc77fed4e3d506eb8c495e

  • SHA512

    4ebacab05982ef4716b75cddeb5101b6c34a98ac4392dd3b50a6ac2598e5b649d25f567538de5590af82424035e076f6d258062602a2772211cab222a5993142

  • SSDEEP

    384:/MK6b2GZsx/Yr1+liORH1kcPFQ6Lg9gSOYRr9mRvR6JZlbw8hqIusZzZ5H:4b9glF51LRpcnum

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

almammory.hopto.org:1177

Mutex

dd161c4b4f160d5806a1fd5d05e4100e

Attributes
  • reg_key

    dd161c4b4f160d5806a1fd5d05e4100e

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b07733aac70a03af8b3f68a569f167fa_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections