General

  • Target

    d58c2551b08278017175837de41fa2f8_JaffaCakes118

  • Size

    37KB

  • MD5

    d58c2551b08278017175837de41fa2f8

  • SHA1

    ead9a962150c76f83c5923ac991b97278b7b78f7

  • SHA256

    6f42fed72d035eba81d52fa01f2cb8443594438e95774fd22c4a9b154c7027aa

  • SHA512

    6fcf497f7c411b424a08059c8854e6956064a31c648c0eb0ff0070fbc9f9ef4a7818c904190b4cb0f4afe8a8b8acb7126b7ba0acccc834094d9497de0143dc5e

  • SSDEEP

    384:VvdCKMizd3jnBhFbJ8ycPj93tRwympwrAF+rMRTyN/0L+EcoinblneHQM3epzXZa:HCg3lLJfcPj9XNmSrM+rMRa8NuH141t

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

микро

C2

176.103.58.151:6666

Mutex

f06bcc7f370f2e2af9ce67492f3f1883

Attributes
  • reg_key

    f06bcc7f370f2e2af9ce67492f3f1883

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d58c2551b08278017175837de41fa2f8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections