Overview

overview

10

Static

static

10

sample.exe

windows7-x64

10

sample.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_67e9f048a8496c0c78cb9bf80c0ad800

  • Size

    13KB

  • MD5

    67e9f048a8496c0c78cb9bf80c0ad800

  • SHA1

    9150318b90aa299a06457c84a9a8801006acbbd3

  • SHA256

    a5c9fcb35fcae9abf9e18c9b631d981ead63255e28efc0386e72ec004a0b6a3c

  • SHA512

    416429d64d21c56321e548b04aaea179163075498ac868160cbb75b2b12be8f0868533aa41fa43c918cccd52b6fe6d62b155deaa7e0fd0e3011610a12fa3365a

  • SSDEEP

    384:/Ngswni6P7iQ4Nk70QJW2zm9vSRvSU+fMnFgRK0HCNcs6A:F9sFt4Nkgx2z+vSJSUFUCcNA

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

127.0.0.1:1604

Mutex

032c6e346b739748e572e06648200854

Attributes
  • reg_key

    032c6e346b739748e572e06648200854

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_67e9f048a8496c0c78cb9bf80c0ad800
    .gz
  • sample
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections