General

  • Target

    D8F6CADD686AEF1423100DAE9231C47D.exe

  • Size

    1.8MB

  • Sample

    210911-sf9lfaeegq

  • MD5

    d8f6cadd686aef1423100dae9231c47d

  • SHA1

    af46bfe9e441788fff35ca3613a805c23780a9fd

  • SHA256

    8e38c9ed504d812b26fa8f6c5217127fdfa945da4ac74ebedbade7287fafd062

  • SHA512

    466e25ecd6e418ed9451b56a1d680531f7973f5c0b5622c606d9e3ec16d7deba6b9fbee7e01335ecdfecb8eb59e678eb2332a8d99133ea42834c535b486fefe1

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

milla.publicvm.com:5050

Mutex

8a1729b26bbe40d8

Attributes
  • reg_key

    8a1729b26bbe40d8

  • splitter

    @!#&^%$

Targets

    • Target

      D8F6CADD686AEF1423100DAE9231C47D.exe

    • Size

      1.8MB

    • MD5

      d8f6cadd686aef1423100dae9231c47d

    • SHA1

      af46bfe9e441788fff35ca3613a805c23780a9fd

    • SHA256

      8e38c9ed504d812b26fa8f6c5217127fdfa945da4ac74ebedbade7287fafd062

    • SHA512

      466e25ecd6e418ed9451b56a1d680531f7973f5c0b5622c606d9e3ec16d7deba6b9fbee7e01335ecdfecb8eb59e678eb2332a8d99133ea42834c535b486fefe1

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

      suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

MITRE ATT&CK Matrix

Tasks