Overview

overview

10

Static

static

10

f17f6f423d...18.exe

windows7-x64

f17f6f423d...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f17f6f423dd219b18a198d09300838fb_JaffaCakes118

  • Size

    80KB

  • MD5

    f17f6f423dd219b18a198d09300838fb

  • SHA1

    e58495641aa0d27d8e59a14c2237a11c760295e4

  • SHA256

    eefa31596e1e4e81548fb9bdd7e1ee264a3db76a5bb99000f66114103ad6ef47

  • SHA512

    ebb3a6608f0fbe407550991d9fc6dc0bb211a8095ff721752125a40de650c8216a43bd8a0e83d5a841fc44f694b882b73fbad116df8d0714c89f7a0dad10cfd5

  • SSDEEP

    768:6Wf65K2Yf1jKRpcnucQxorDZRAzMhNLyXzhnGw87CjtVON+i6BLawsORLb1:RfIshKRWuctqLUyt0NKmG

Score
10/10
nomenjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

nome

C2

156.196.207.35:2222

Mutex

89db26157b954669067107473cf475ec

Attributes
  • reg_key

    89db26157b954669067107473cf475ec

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f17f6f423dd219b18a198d09300838fb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections