General
-
Target
c781f65073ff97c1c69a77076b56d590_JaffaCakes118
-
Size
43KB
-
MD5
c781f65073ff97c1c69a77076b56d590
-
SHA1
4073f2bfb8310f285c9b2be56f36e62e63f4aade
-
SHA256
a1fd2588be4c4773ace6f5740825dd97f17217a74f9a6f3f2efca3fb7ee8b685
-
SHA512
791e81134dbfefb9f55a23c76e57f1bad6f47c382d3d7572e5666e0e7f458bf777100231bd0c762cef982a373450647d4fec15fc4288a4b2dfae5530426a8d1c
-
SSDEEP
384:4ZyavHn1iDcsyEqtBfkEGCOEhGyOEtzcIij+ZsNO3PlpJKkkjh/TzF7pWnz/greT:O9HnU4pEqtNkE5SyZuXQ/oa3+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
HacKed
C2
192.168.0.10:5565
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c781f65073ff97c1c69a77076b56d590_JaffaCakes118
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections