Analysis
-
max time kernel
151s -
max time network
147s -
platform
windows10_x64 -
resource
win10-en-20211208 -
submitted
29-12-2021 23:46
General
-
Target
a28656f539450e71284c372b4d8cb1de.exe
-
Size
20.2MB
-
MD5
a28656f539450e71284c372b4d8cb1de
-
SHA1
c7fe2e2399212cff176b732640a08471f8771dba
-
SHA256
63dec7fa46a8b31f38ec74c9518847f54e570b62b1664f191a596727bf75f22b
-
SHA512
5e0023d0ed5dca5eb7253048ceba5d88fbdbd03ca471e2b9a40511007f82521b03ce4b6ae726a338869441c9330929eadadffa5479d6af01a0420cf095c0ccf4
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7NC
Botnet
NYAN CAT
C2
milla.publicvm.com:5050
Mutex
dd177bd3cca5
Attributes
-
reg_key
dd177bd3cca5
-
splitter
@!#&^%$
Signatures
-
njRAT/Bladabindi
Widely used RAT written in .NET.
-
Suspicious use of AdjustPrivilegeToken 35 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a28656f539450e71284c372b4d8cb1de.exe"C:\Users\Admin\AppData\Local\Temp\a28656f539450e71284c372b4d8cb1de.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
624KB
-
Filesize
5.0MB
-
Filesize
584KB
-
Filesize
4KB
-
Filesize
40KB
-
Filesize
344KB
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
48KB
-
Filesize
408KB