General
-
Target
JaffaCakes118_1084cb1760116d072d0c177a76ba7981
-
Size
43KB
-
MD5
1084cb1760116d072d0c177a76ba7981
-
SHA1
b156917a9ae67594ee252fe66b53a324c669e2e7
-
SHA256
7a74c3da1e601731a252173aa4c76c17263e812a6e21c565baf4b6ca808c87b9
-
SHA512
ed7ef19128c0bce992fc7539aa7be5ea6064f16fe7f719675e26b8f2c6cdc54f27f472b95879150b423c82b4580e727a0237171f4b184dbd4e3ca59c05890eb8
-
SSDEEP
384:JZy9daFIB+oyitVv0OCMDafIutK9D9O5UE5QzwBlpJNakkjh/TzF7pWn2/greT0s:LZ+IliLvDwRvQO+Tl+L
Score
10/10
Malware Config
Extracted
Family
njrat
Version
Njrat 0.7 Golden By Hassan Amiri
Botnet
HacKed
C2
192.168.0.153:9360
Mutex
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_1084cb1760116d072d0c177a76ba7981
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections