General

  • Target

    b4f08716d55e62ffcb02534ba977a94c_JaffaCakes118

  • Size

    23KB

  • MD5

    b4f08716d55e62ffcb02534ba977a94c

  • SHA1

    7f97a1fdc05ae19bcb6a2d45c81006c575fe9132

  • SHA256

    bf7610bec2416bf141156e8d2b89ef52a2a80fa7b065d717dc9d393be4725206

  • SHA512

    805a18ff08086d424df4cff2ec4d5c7e91280e9d3d480047e0143a733198bf39332e2260ce2d32d522f144807dada04a67236e0d4b8cc366ca14076dc517772e

  • SSDEEP

    384:UQeCo2zmZbQHkJeCdUwBvQ61gjuQBnB9mRvR6JZlbw8hqIusZzZov:75yBVd7RpcnuR

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

ldh060719.iptime.org:5552

Mutex

339d42466a7be49058c52e23a3eaaec5

Attributes
  • reg_key

    339d42466a7be49058c52e23a3eaaec5

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b4f08716d55e62ffcb02534ba977a94c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections