General

  • Target

    JaffaCakes118_b68bfc79f67b93e3db137eb63f31071e

  • Size

    37KB

  • MD5

    b68bfc79f67b93e3db137eb63f31071e

  • SHA1

    e6252d84c7135bd5749529cb1f412aa2768a6203

  • SHA256

    e890608a4cc37e0c648574caa821053c427732ba0afc2eaf432b635709d0d791

  • SHA512

    8990b22c7e23db28d9217f7be96cad890bbd0ad1b32ae98e4b5810c2ad7ae84df46c124423b0cc9d6c92436fbd424e5b3b2444d2275a3b1f5b3059ce90b16ebc

  • SSDEEP

    384:sk7pyEithPJWtckUy8fFMfPke9PEJYrAF+rMRTyN/0L+EcoinblneHQM3epzXQN5:T+zkX8fFME4EurM+rMRa8NuCBt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

185.11.83.58:8080

Mutex

42884113853c24691f6976d8ae78b82d

Attributes
  • reg_key

    42884113853c24691f6976d8ae78b82d

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_b68bfc79f67b93e3db137eb63f31071e
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections