General

  • Target
    a7c7bb532823a6e7d4ace596f146c618.exe
  • Size 113KB
  • Sample210908-t4s42aaack
  • SHA256 64d7d58724fe40787f7fdcb2496f96206c538fb80c14fc8827f4e5af9a5c99c8
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • njrat

Version
  • 0.7d

Botnet
  • Run RunPE

Attributes
  • splitter

    |'|'|

Targets

    • Target
      a7c7bb532823a6e7d4ace596f146c618.exe
    • Size 113KB
    • SHA256 64d7d58724fe40787f7fdcb2496f96206c538fb80c14fc8827f4e5af9a5c99c8
    • MD5 SHA1 SHA512
    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

      suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks