Overview

overview

10

Static

static

10

f94b4ab2c3...18.exe

windows7-x64

10

f94b4ab2c3...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f94b4ab2c33c3b472c278fd963e67805_JaffaCakes118

  • Size

    43KB

  • MD5

    f94b4ab2c33c3b472c278fd963e67805

  • SHA1

    9684d295c9a6527e3134a04d08847d044bdd60b3

  • SHA256

    4be466909ca7f3a1384808e517894a07fbe6910ed4fba4f74f096d7bef59c2c4

  • SHA512

    868abe2bd7f1a73ba31bce408da22832bc99d691806d1de21cf3a45e59fb9e352ad40db585411fc49d0ea9399c2c1223a792b4f71ac1984828f35b2a5df0f3d1

  • SSDEEP

    384:iZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWn7mgra:Q99nU4pEqt5tKhohuuXQ/omC+L

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:1177

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f94b4ab2c33c3b472c278fd963e67805_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections