Overview

overview

10

Static

static

10

sample.exe

windows7-x64

10

sample.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6081d526ddb3c4b281506bc366eba1d0

  • Size

    11KB

  • MD5

    6081d526ddb3c4b281506bc366eba1d0

  • SHA1

    d16aecfb6781790a5eec7ecaac4bc497130638a9

  • SHA256

    a91818afca0774910c2d2b70731d26d59561aab450235ec16ba7f8120caa3718

  • SHA512

    3ab6b0c52234cf1ba8fd6a4c730e31712307ef891c77d70f0a04bcfe1581902e7661582baf240e29d61f496a5a9bd9f7646fa601c292d8e88ed6fa3f47dcec74

  • SSDEEP

    192:oJDjqWx/u/mvRqdD0pCcivlSEsp/7P1idgwVwFKN8yeysycLj1JImRL2K:oEO/6mMdDqbilI/7PC5QfL7IY

Score
10/10
mr.black hacknjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Mr.Black Hack

C2

127.0.0.1:5552

Mutex

174c5beaaab0252002ef1fe5676b6863

Attributes
  • reg_key

    174c5beaaab0252002ef1fe5676b6863

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6081d526ddb3c4b281506bc366eba1d0
    .gz
  • sample
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections