Overview

overview

10

Static

static

10

558d83545b...18.exe

windows7-x64

10

558d83545b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    558d83545b3096f901e84dd00bccd9e8_JaffaCakes118

  • Size

    23KB

  • MD5

    558d83545b3096f901e84dd00bccd9e8

  • SHA1

    f8a62eb35a55307eaea56a4d689b1d9e68e303ea

  • SHA256

    b7f5245002784627da1996be95b0e18abd73df0da01cbb268e39c5d39f04f4e8

  • SHA512

    af4bcdb32071d2aef39fbe71f54466af07eb788ba9494af7f7937c93ac77cf341465bb733a0ba587f12606dc4c114d81293ae287f2041c8df0c3539bb3ce857d

  • SSDEEP

    384:3reop9oS+2pRURIXIRHVSuV+MX9w6Vglo61ZhXDVmRvR6JZlbw8hqIusZzZwe:3Sof9pnIP1V6YRpcnuA

Score
10/10
coooooinnjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

COOOOOin

C2

facebook-sports.publicvm.com:1643

Mutex

c594020b32b858bc072fb76065d697d0

Attributes
  • reg_key

    c594020b32b858bc072fb76065d697d0

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 558d83545b3096f901e84dd00bccd9e8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections