General

  • Target

    c781f65073ff97c1c69a77076b56d590_JaffaCakes118

  • Size

    43KB

  • Sample

    240828-x794hatflk

  • MD5

    c781f65073ff97c1c69a77076b56d590

  • SHA1

    4073f2bfb8310f285c9b2be56f36e62e63f4aade

  • SHA256

    a1fd2588be4c4773ace6f5740825dd97f17217a74f9a6f3f2efca3fb7ee8b685

  • SHA512

    791e81134dbfefb9f55a23c76e57f1bad6f47c382d3d7572e5666e0e7f458bf777100231bd0c762cef982a373450647d4fec15fc4288a4b2dfae5530426a8d1c

  • SSDEEP

    384:4ZyavHn1iDcsyEqtBfkEGCOEhGyOEtzcIij+ZsNO3PlpJKkkjh/TzF7pWnz/greT:O9HnU4pEqtNkE5SyZuXQ/oa3+L

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

192.168.0.10:5565

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      c781f65073ff97c1c69a77076b56d590_JaffaCakes118

    • Size

      43KB

    • MD5

      c781f65073ff97c1c69a77076b56d590

    • SHA1

      4073f2bfb8310f285c9b2be56f36e62e63f4aade

    • SHA256

      a1fd2588be4c4773ace6f5740825dd97f17217a74f9a6f3f2efca3fb7ee8b685

    • SHA512

      791e81134dbfefb9f55a23c76e57f1bad6f47c382d3d7572e5666e0e7f458bf777100231bd0c762cef982a373450647d4fec15fc4288a4b2dfae5530426a8d1c

    • SSDEEP

      384:4ZyavHn1iDcsyEqtBfkEGCOEhGyOEtzcIij+ZsNO3PlpJKkkjh/TzF7pWnz/greT:O9HnU4pEqtNkE5SyZuXQ/oa3+L

MITRE ATT&CK Enterprise v15

Tasks