General
-
Target
d4ae130ffb524a176b0f218ec461a32f_JaffaCakes118
-
Size
37KB
-
MD5
d4ae130ffb524a176b0f218ec461a32f
-
SHA1
41fae0afe0d112bed49658f9bde1191e90990138
-
SHA256
bf01bd6b7f7aa984e24d4e1ad2bb56a422d7bf1f609256d5094020d8ff887dc8
-
SHA512
a0ca2ef49f25e713aa30d57ed3b2402bc399e2753c0942611613ff20ff96a44c38f641994d39b740bd5216201947f3a96459d52d8c1bc669bd0bbcd16ddeadfe
-
SSDEEP
384:DKNTgiG1CVZfursvO6yszop0n/eT3wSArAF+rMRTyN/0L+EcoinblneHQM3epzX6:GNh5Wpszop0mzw/rM+rMRa8NuOrt
Score
10/10
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
KRIC
C2
192.168.1.130:5552
Mutex
cdffbb02e1916328f4aa20d5c638f039
Attributes
-
reg_key
cdffbb02e1916328f4aa20d5c638f039
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d4ae130ffb524a176b0f218ec461a32f_JaffaCakes118
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections