Overview

overview

10

Static

static

10

f0e38cb556...18.exe

windows7-x64

10

f0e38cb556...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f0e38cb5564a416a69d54e85af4f5b40_JaffaCakes118

  • Size

    43KB

  • MD5

    f0e38cb5564a416a69d54e85af4f5b40

  • SHA1

    dd143da1da6d3a327e5fb8965c18d5c6518344dc

  • SHA256

    a984108cbf49aca81b1a4c9a73315d2b9638f0a2b0fb9e4cdb009855cac8e4db

  • SHA512

    2878d98c68ea8cb538573abe73b755b1c5bef869b28f45aa65017028d287bd67d36f59149eab1e36f7d4f794ee2836e6ae81673e4c7b6de585b926e9417a302e

  • SSDEEP

    384:rZylrsVqb08yPIpXixeCGEslmcNz0Iij+ZsNO3PlpJKkkjh/TzF7pWnolgreT0pe:Fors8Y5PId6ROlBuXQ/oRl+L

Score
10/10
hackopkanjrat

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HackOPKA

C2

127.0.0.1:5552

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f0e38cb5564a416a69d54e85af4f5b40_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections