General

  • Target

    JaffaCakes118_61809b010a8f9723a9ea094d2adf3920

  • Size

    23KB

  • MD5

    61809b010a8f9723a9ea094d2adf3920

  • SHA1

    fcf6a1d7b507ee1cfb8899f5e58122f7befc8790

  • SHA256

    727db57d3f4400665a5dcc64fd825cbe3f645ac80e511220eec440d715126e84

  • SHA512

    3d533e88e74245b5bea143234904b320cdca1595c32438b8b580f7e58ad948750ceac3c7767c41de135872b1b5c2fd6791555a57692654ca7812b7ca4d3b2d4b

  • SSDEEP

    384:zsqS+ER6vRKXGYKRWVSujUtX9w6Dglo61Z5DVmRvR6JZlbw8hqIusZzZup:of65K2Yf1jKRpcnul

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

mohae.no-ip.biz:5552

Mutex

864b3cef75155495138d6181b5847aeb

Attributes
  • reg_key

    864b3cef75155495138d6181b5847aeb

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_61809b010a8f9723a9ea094d2adf3920
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections