Overview

overview

10

Static

static

10

39c7890454...18.exe

windows7-x64

10

39c7890454...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39c7890454199e5b02bb27a88a5de133_JaffaCakes118

  • Size

    23KB

  • MD5

    39c7890454199e5b02bb27a88a5de133

  • SHA1

    5a74f54d3b229ac8d0232ebbbd06d1225e506130

  • SHA256

    d9009371df732bd8b3ccab8b38e9968069503292b112b2b27cb1c3c54814b3ab

  • SHA512

    05ac5c0249a16041117b628ca88fc3ea1c39296fc451064d60ce2e782685cc27055e4721aefa0d7c219f7b5e04765741b690edcaa0e546f64fa448c2db1cb404

  • SSDEEP

    384:hc6CqbFYh3odrVCGiHssDB4b6i6fgpEupNXRmRvR6JZlbw8hqIusZzZJWv:iIU0tw3RpcnuYI

Score
10/10
elite regedit vitimanjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

ELITE REGEDIT vitima

C2

4.tcp.ngrok.io:15690

Mutex

136b1168824f71e066b31d730796138d

Attributes
  • reg_key

    136b1168824f71e066b31d730796138d

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 39c7890454199e5b02bb27a88a5de133_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections