General

  • Target

    JaffaCakes118_47b5c95661cc9b549430191bdcb3baa0

  • Size

    23KB

  • MD5

    47b5c95661cc9b549430191bdcb3baa0

  • SHA1

    75b6cbd129e9291bf0fc24146c9bb5aafe19159c

  • SHA256

    6a9eaed50b2f173e8169ac8ae34de895b3f016b905226295e1ec43d4817070f4

  • SHA512

    5964a40e556164a869e65fda593b391485c28dc738ae418e823cf888fe1ee0359ad743c93c2563e608226509f229d7f50541fa25590b88e0c29d63e152f9fcaf

  • SSDEEP

    384:MqMqYmCsg/yJrQ7hucGSl7UJx4g6JgfCcosjddmRvR6JZlbw8hqIusZzZpts:MqErG0Btl7rRpcnuv

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

0932343ebc836c39c857a65dc20ea0fb

Attributes
  • reg_key

    0932343ebc836c39c857a65dc20ea0fb

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_47b5c95661cc9b549430191bdcb3baa0
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections