General

  • Target

    e24470ba45fb82640f5a0f6bf8cce6cd_JaffaCakes118

  • Size

    31KB

  • MD5

    e24470ba45fb82640f5a0f6bf8cce6cd

  • SHA1

    291f7a4fe51a5eeb389682554641d45e9cf19c6d

  • SHA256

    43a75781e05e4ccbb8cb4dc3d4b1fea003f561071c9a9408d7e7a94ba22b647c

  • SHA512

    48ba7c3f0ada8010355c072a8aad789faaa784b85f98b884ba63383115b1921b3b4a3b2edfac6a4b5502575215650b00243e67d62b8565b6f47628d4637e6f2e

  • SSDEEP

    768:/BhOhb13hdwzxLy3AcEOv1MRvK/QmIDUu0tiJoi3Jj:50Z6256AQVkqj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Steam ot seni

C2

109.202.54.48:6522

Mutex

daa92e06979a8122867a80f61cf3dc51

Attributes
  • reg_key

    daa92e06979a8122867a80f61cf3dc51

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e24470ba45fb82640f5a0f6bf8cce6cd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections