Overview

overview

10

Static

static

10

c7a8f1df58...18.exe

windows7-x64

8

c7a8f1df58...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c7a8f1df58106bf2feca10982b036563_JaffaCakes118

  • Size

    37KB

  • Sample

    240828-z1xkyaweqe

  • MD5

    c7a8f1df58106bf2feca10982b036563

  • SHA1

    69accc51b9ec52522b0679689d19cc978c1ed176

  • SHA256

    6315eb063c4308544234aa673dd4c7fe000132468d5095d4c827768aff3a3040

  • SHA512

    121bf135b3ba74e5617a6dad0224eef150595e4c16610cf16865c89461d1a504a069b02339499134d836ed721b26b502c7273dd4b28fd2ca00990e7afa118db2

  • SSDEEP

    384:B6l+yw7BeAaXaEiVbzdmB0O4yUvNixgp+Z2v/RYJ/oM6IxrAF+rMRTyN/0L+Ecoo:gcyw79POTUvNZYv64rM+rMRa8Nufvt

Score
10/10
njrathackeddiscoveryevasionpersistenceprivilege_escalation

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

192.168.1.204:5552

Mutex

900850df1aefc6a50eeab020937b983d

Attributes
  • reg_key

    900850df1aefc6a50eeab020937b983d

  • splitter

    |'|'|

Targets

    • Target

      c7a8f1df58106bf2feca10982b036563_JaffaCakes118

    • Size

      37KB

    • MD5

      c7a8f1df58106bf2feca10982b036563

    • SHA1

      69accc51b9ec52522b0679689d19cc978c1ed176

    • SHA256

      6315eb063c4308544234aa673dd4c7fe000132468d5095d4c827768aff3a3040

    • SHA512

      121bf135b3ba74e5617a6dad0224eef150595e4c16610cf16865c89461d1a504a069b02339499134d836ed721b26b502c7273dd4b28fd2ca00990e7afa118db2

    • SSDEEP

      384:B6l+yw7BeAaXaEiVbzdmB0O4yUvNixgp+Z2v/RYJ/oM6IxrAF+rMRTyN/0L+Ecoo:gcyw79POTUvNZYv64rM+rMRa8Nufvt

    Score
    8/10
    discoveryevasionpersistenceprivilege_escalation
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks