General

  • Target

    6852D3878C1E6A470B905EF5CF13CB666E36307FB7DB6.exe

  • Size

    5.5MB

  • Sample

    220105-syl8vsagek

  • MD5

    f8314fd240a306437fb20657b8e0280a

  • SHA1

    b8df41aaad5e8caf38ab5440d37d34309c587985

  • SHA256

    6852d3878c1e6a470b905ef5cf13cb666e36307fb7db62b15fa06af0d09f81f6

  • SHA512

    19ec4d44cd8f7db6bc81a3c0c14b59241ed0eb7c1b40c306b417bc661ffa0a0a5527aecec9be56ecb7ce56a9e1f616adb627f6e8690eea15068db44a1a43151a

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

milla.publicvm.com:5050

Mutex

f6e1d54b64c74d

Attributes
  • reg_key

    f6e1d54b64c74d

  • splitter

    @!#&^%$

Targets

    • Target

      6852D3878C1E6A470B905EF5CF13CB666E36307FB7DB6.exe

    • Size

      5.5MB

    • MD5

      f8314fd240a306437fb20657b8e0280a

    • SHA1

      b8df41aaad5e8caf38ab5440d37d34309c587985

    • SHA256

      6852d3878c1e6a470b905ef5cf13cb666e36307fb7db62b15fa06af0d09f81f6

    • SHA512

      19ec4d44cd8f7db6bc81a3c0c14b59241ed0eb7c1b40c306b417bc661ffa0a0a5527aecec9be56ecb7ce56a9e1f616adb627f6e8690eea15068db44a1a43151a

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

      suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

MITRE ATT&CK Matrix

Tasks