General
-
Target
de9fa2fe4f0be05dbc0089d148a8f666_JaffaCakes118
-
Size
43KB
-
MD5
de9fa2fe4f0be05dbc0089d148a8f666
-
SHA1
d1519b0150e92f3a0791b5b47aad76c1552cf241
-
SHA256
555cd583a20def5bacd0f90aa29718cc7937d08811bc0558eb1739040928847b
-
SHA512
cef5dc2ccac0b4140aee14f456c147f7f1208b15724ac67e2f30cbf3aa99a4609ec45f2b009425f639472f3ae19e19137ebfcab684c02d4857df9ab33065d662
-
SSDEEP
384:V8ZyWQF3VarE8yTTTfqtiWqEnkDai0+TzEIij+ZsNO3PlpJKkkjh/TzF7pWnmrgm:V69i3MY5TffqtpSDluXQ/ofL+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
User
C2
vlad71 hopto.org:5552
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
de9fa2fe4f0be05dbc0089d148a8f666_JaffaCakes118
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections