Overview

overview

10

Static

static

10

8f04eb500e...f4.exe

windows7-x64

10

8f04eb500e...f4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a412582126a26088567044df41ee0d6e749bd7d7a0cbc375fc7628c7424ffe23

  • Size

    12KB

  • MD5

    1353d0ce732424cd2c6b006d9386b01a

  • SHA1

    227d840f5ccee27295de72a5d50133b1d87db4de

  • SHA256

    a412582126a26088567044df41ee0d6e749bd7d7a0cbc375fc7628c7424ffe23

  • SHA512

    423f94c0f752cde14738a27eeabf6846b8a4c4140b8980cade73cbc50075c685e543e1c52f0e4b480a5206150c5fa68ecc87144c96d6f70176d4873153fb9c40

  • SSDEEP

    192:JESvomo8MwQYlKpzm3KO4t8TIYrvQtLWhgwn8lUe4mpRf2NFMQNKqMsFxqe+y5:mAhHQYlKpGKOmYpsdUg6IZzQNFz5

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

v4.0

Botnet

HacKed

C2

216.250.251.104:2028

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_a412582126a26088567044df41ee0d6e749bd7d7a0cbc375fc7628c7424ffe23
    .zip
  • 8f04eb500e66a053fa3e6e8a9900e94e794218253a172265c3a881db6f65faf4
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections