General

  • Target

    bdfee192ac09545d738438cbbd961f25_JaffaCakes118

  • Size

    31KB

  • MD5

    bdfee192ac09545d738438cbbd961f25

  • SHA1

    7e649ae72d7ead9d8c3a2a6ac9741c67685fc45a

  • SHA256

    5fc6ab9998a89e18e36a79877d3f64b929489e960a57aa3fd39aa829c40b1c85

  • SHA512

    475616b5ad55baf9999f1b9c8987f8dc723aa591fa959b8ec5eeca59b618f3866d00652de8dc3d883ea9e15bf1c934e5e5cba7fc2d539cd55570cbc8d7d9478b

  • SSDEEP

    768:y/63v1Qb1pszxH6TkkzwAHlFJFvIFQmIDUu0tiFCj:z2K4FvwQVk9j

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

AvastUI

C2

128.70.98.64:52762

Mutex

bb1a3344535430e4d76d8fb69c37d82d

Attributes
  • reg_key

    bb1a3344535430e4d76d8fb69c37d82d

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bdfee192ac09545d738438cbbd961f25_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections