Overview

overview

10

Static

static

10

e20f3bd5a6...18.exe

windows7-x64

10

e20f3bd5a6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e20f3bd5a62ee4974c63f2a3fc1f3c91_JaffaCakes118

  • Size

    135KB

  • MD5

    e20f3bd5a62ee4974c63f2a3fc1f3c91

  • SHA1

    a9748cbec07bad741379141d66308171933dc940

  • SHA256

    7344fd917184119d3a50e368d143652e1cc8923ba282fd4f9a282355e3134600

  • SHA512

    d72a3420751d3778d4053fc737e63dbc7900c9b405801506d889e23cb5b7117ab365ef48d2226c98d88cb882d7b842f159696ae432701ff68d64e179fa42b9bf

  • SSDEEP

    768:lW4V6+yDRpcnua0WPw43GZJRhRER5R8HRRGRxRRUReRxRTRpR5sp+IGuxS0ip1W0:lW4VcDRWua0WPT/0S1p1Wm5p

Score
10/10
seeendnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

seeend

C2

ms1000.myq-see.com:1000

Mutex

b36ec6c682f0258206676a6f57163305

Attributes
  • reg_key

    b36ec6c682f0258206676a6f57163305

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e20f3bd5a62ee4974c63f2a3fc1f3c91_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections