Overview

overview

10

Static

static

10

d673e4719c...18.exe

windows7-x64

3

d673e4719c...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    d673e4719c9631762e26779af439c710_JaffaCakes118

  • Size

    32KB

  • MD5

    d673e4719c9631762e26779af439c710

  • SHA1

    e9a9b08c15d61d1e6602219ab6940ef077d9bbd9

  • SHA256

    38c432174a3f8234fa103a7ca833483f800f36a8fa7b5377baab0c74bea19f86

  • SHA512

    e10aad9dced39c54500cf2fcfe7b23c1a7d9c62e68b9f21df6c82dca08e214513dcdce023ab3812acd07066e96bb29cc4cec88382da19e3734329c298c77924e

  • SSDEEP

    384:6CbP3tSX6vBq7lazgEcsTQK/ecpfQBMlg2rWTvtebrOFeqzKRZq:fS6vBqMzCs0IecpyqVVrrZq

Score
10/10
njrat

Malware Config

Extracted

Family

njrat

C2

190.213.72.103:5005

Mutex

8598e9fde4

Attributes
  • reg_key

    8598e9fde4

  • splitter

    @!#&^%$

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d673e4719c9631762e26779af439c710_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections