Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

d9d6b4de0b...18.exe

windows7-x64

10

d9d6b4de0b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9d6b4de0bcd753696416e79bf4326a8_JaffaCakes118

  • Size

    23KB

  • MD5

    d9d6b4de0bcd753696416e79bf4326a8

  • SHA1

    8709c533630cc4605a2026cefea3a318f7ac68a7

  • SHA256

    652984db4fa609aa511588d230d1d649f99ab2b2b2406266767f338df9180809

  • SHA512

    206b05a04e75931826047d27b27f3458c8ade2eff915755edd61897990b3731334a5fb9cf78768a3775350b23f531c91710f775d3590668d1926ae47f997e4a0

  • SSDEEP

    384:qMK6b2GZsx/Yr1+liORH1kcPFQ6Lg9gSOYRr9mRvR6JZlbw8hqIusZzZZd:Vb9glF51LRpcnuw

Score
10/10
explerer.exenjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Explerer.exe

C2

127.0.0.1:3158

Mutex

4c4aa92a215563e1cf8eab046cd035b7

Attributes
  • reg_key

    4c4aa92a215563e1cf8eab046cd035b7

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d9d6b4de0bcd753696416e79bf4326a8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections