General

  • Target

    2bcf21bc153cf5b29070f9ed9d8d0b80_JaffaCakes118

  • Size

    32KB

  • MD5

    2bcf21bc153cf5b29070f9ed9d8d0b80

  • SHA1

    cce38a455782953a364bbedf72a76f22790f8a73

  • SHA256

    57cb093510514d18e117230d0b01837dfa0492bf89f76638bd8bc7cdcf7422d0

  • SHA512

    9e8dddf846d5d77d92a3476489898a17a4fc958840403f28daf56b706827b08053cd097a891d7151b0ae83ef4a14d7d931fbdd184d79a5fa5d88860bf62c37b0

  • SSDEEP

    384:J0bUe5XB4e0XOOVClXCpF7r/HWTLtTUFQqzFdObbb:yT9BuNYlQYDbb

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

monobrayan.duckdns.org:1983

Mutex

6049e44870

Attributes
  • reg_key

    6049e44870

  • splitter

    @!#&^%$

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2bcf21bc153cf5b29070f9ed9d8d0b80_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections