Overview

overview

10

Static

static

10

e089aff85d...18.exe

windows7-x64

10

e089aff85d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e089aff85d76e68515a5dd65180364af_JaffaCakes118

  • Size

    23KB

  • MD5

    e089aff85d76e68515a5dd65180364af

  • SHA1

    a7cf5bbda13cc2bd75f200ed82620cccc0c78a13

  • SHA256

    bc341eccbdfecf1616134d92035e90b0622ec6731e5c5f74418f00ce3033a689

  • SHA512

    593be830ee7122c93ea2e4dbcca0181413e1b2455ca4fe0ce66ef42997351380b8d2c9c3fce184d04e1113cf3229372d2da9d6e638c15c7e78234b8de4931991

  • SSDEEP

    384:BpMKFYuEEhERvoBG16Xuy0MHNw6Tg1Y+75JTFmRvR6JZlbw8hqIusZzZhX:BCW4V6+yDRpcnui

Score
10/10
shadow-znjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

SHADOW-Z

C2

steam008.ddns.net:255

Mutex

4719599c6e49aad91cb3f7978e53123b

Attributes
  • reg_key

    4719599c6e49aad91cb3f7978e53123b

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e089aff85d76e68515a5dd65180364af_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections