General

  • Target

    cea270962e3b94075eb2cedc0e0afb6e_JaffaCakes118

  • Size

    43KB

  • MD5

    cea270962e3b94075eb2cedc0e0afb6e

  • SHA1

    db4a3e6ea221ee770f78dc21b7fb45400f813b42

  • SHA256

    4b4266d3268e76711e605da2dc491925fe87484606cb406a32d3f57fdde62f86

  • SHA512

    539ec879630149eb2366562da0ba4425e94b55e514f9191d8fc6b2f03aad50e07ff3ca51bf44e69be78de361174794dcb8f7e2f945d6cafad311a0e5b407392a

  • SSDEEP

    384:UZyPmCn1iDcsyEqtBfQEGCAMtGyOEBW9D9O5UE5QzwBlpJNakkjh/TzF7pWna/gy:icnU4pEqtNQE5YynvQO+jt+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cea270962e3b94075eb2cedc0e0afb6e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections