Extracted

• • Target

    JaffaCakes118_c48758624af273af2d9876834c31a3d8

  • Size

    111KB

  • MD5

    c48758624af273af2d9876834c31a3d8

  • SHA1

    1a35126b5bbc2b47b9e772eee2969b206c32e5bc

  • SHA256

    6a3cd0efa35f0834f1c0435c1c051da5e128988e08cead8d9c82a57da2bf4c80

  • SHA512

    9b8f8e2d498c28efce4431220a1557e67db02fabf70b4097902ce85e7709af39c0f23d9556256df9b7a46b1f69bc05e9a64c1b2e07a5f2a81b34f14f0aabfc90

  • SSDEEP

    1536:C8OCPjUq4QRwDBWtTcnNzmWb3Aq3Gh5nRdWKA3oM6:C8yq4gwDBWtTcBrbLGmKAYM6

  Score

  10^/10

  njrathackeddiscoverytrojan

  • Njrat family

    njrat

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2