General
-
Target
cbe5a9ffd4128fa7c8ea555455151c7d_JaffaCakes118
-
Size
43KB
-
MD5
cbe5a9ffd4128fa7c8ea555455151c7d
-
SHA1
cd96a814c8e442b7821c0b3b0610f5d074cbf623
-
SHA256
bd7756e21e511c9722e358d10f5ba298075b31b1c76596701efd9c31a2df8ef5
-
SHA512
c712d344a38456055541fe095b12bced7fe0305e3612d96e8fa3d4b393d1a2547fcd20d2f050959fbe6a2b2b00c1658fdf7f5e94edf5b2d2204ec0f43b7029bb
-
SSDEEP
384:KZyz+FgpWoy7A3914YiElIHAknzYIij+ZsNO3PlpJKkkjh/TzF7pWnI/greT0pqD:IxWol7891BEgMuXQ/ol/+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
HacKed
C2
94.253.36.197:5552
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
cbe5a9ffd4128fa7c8ea555455151c7d_JaffaCakes118
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections