Overview

overview

10

Static

static

10

fe539f5b61...18.exe

windows7-x64

10

fe539f5b61...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe539f5b615a9dbb6c67e91499888daf_JaffaCakes118

  • Size

    37KB

  • MD5

    fe539f5b615a9dbb6c67e91499888daf

  • SHA1

    267e7b00433be2c8ac5d1c8a4ee1d90065d8094b

  • SHA256

    c8c743dbb1eae089af4724f547b6a0b0c38e7b25fbc5699e5218dad4cfe1e317

  • SHA512

    cdf6a70381022504e3dd967626c4b560d8cadf3357055ceacd615f05f18315caab0b591d0bcb242bb9e3d524d6124eb054826b21c5873035fb72f28e57b0784a

  • SSDEEP

    384:mM6CiMWB63fbw6ZfrZUy8fyyHFegGVbORvIrAF+rMRTyN/0L+EcoinblneHQM3eB:Rq0DwODZX8fyyE9OhIrM+rMRa8NuMit

Score
10/10
karochedauninjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

karochedauni

C2

194.34.132.152:7576

Mutex

e4cef66ebf3fdf7f22614d89de91686c

Attributes
  • reg_key

    e4cef66ebf3fdf7f22614d89de91686c

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fe539f5b615a9dbb6c67e91499888daf_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections