Overview

overview

10

Static

static

10

c6d31efacf...18.exe

windows7-x64

10

c6d31efacf...18.exe

windows10-2004-x64

10

Resubmissions

28/08/2024, 14:17

240828-rly68atbpl 10

28/08/2024, 12:12

240828-pdjepazbkp 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6d31efacf09b71cee1a3700f6308e3c_JaffaCakes118

  • Size

    43KB

  • MD5

    c6d31efacf09b71cee1a3700f6308e3c

  • SHA1

    4864b32d2cbb2b8c1ce52efeba1f8fc84eb91f7d

  • SHA256

    609ed19dfd3781049679293e44aaa0eb3acf8f1adbe1e08326066969c2e6ef9b

  • SHA512

    e8c4d41d9fafc980279e479bab7655292541a9cddbd52a79d437c50e9c8ef9c36c9c7a933a997e4af3d6634e3ee4c99fa31aab8608ae4f46dbc929600ebf7213

  • SSDEEP

    384:aZya7sVqb08yPGpJQvwosEoTWcfz0Iij+ZsNO3PlpJKkkjh/TzF7pWnqZgreT0pe:477s8Y5PGTi5sTzuXQ/oPx+L

Score
10/10
adolfnjrat

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

Adolf

C2

buybuy.ddns.net:5552

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c6d31efacf09b71cee1a3700f6308e3c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections