Overview

overview

10

Static

static

10

f69104164e...18.exe

windows7-x64

10

f69104164e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f69104164ea88106409ad6dfb0fa3406_JaffaCakes118

  • Size

    23KB

  • MD5

    f69104164ea88106409ad6dfb0fa3406

  • SHA1

    bea5273e7c9f5872a94887a827d356fcac02fa8b

  • SHA256

    cb1af3c68f60224d557e97b9684ca34870fde4399fd2ae9b4ca70658316f11d3

  • SHA512

    ac87b3cd1731c2338a875f2ccacdc958d274df70e42e6849fc0ebaf00fc7ceeed79424b83bf72d8a5d76c7cc4e1edd7c13ba498ce203902c9859da608a66ec52

  • SSDEEP

    384:GLs2aUrue9Bx0RPIxHVSul0M/GrUdw6jgFIqZZj1mRvR6JZlbw8hqIusZzZlb:GgQ/ok1lzRpcnuG

Score
10/10
back in businessnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Back in business

C2

remygeek.ddns.net:1177

Mutex

92a8f18febb251d7899171a22caa28b3

Attributes
  • reg_key

    92a8f18febb251d7899171a22caa28b3

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f69104164ea88106409ad6dfb0fa3406_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections