Overview

overview

10

Static

static

27de9fa03f...75.exe

windows7_x64

10

27de9fa03f...75.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    27de9fa03f4c3950e07c978ae4251c75.exe
  • Size 26KB
  • Sample220309-tt9n2aaed7
  • SHA256 07c7268c2f8a736f5c74f9dabfdf5e10c8a4580fdfcf11eaa7e20a88dd52cae8
  • MD5 SHA1 SHA512
Score
10/10
njratnyan cattrojan

Malware Config

Extracted

Family

  • njrat

Version

  • 0.7NC

Botnet

  • NYAN CAT

C2

  • diosamor27.duckdns.org:8899

Mutex

  • e7466a02bcd

Attributes
  • reg_key

    e7466a02bcd

  • splitter

    @!#&^%$

Targets

    • Target
      27de9fa03f4c3950e07c978ae4251c75.exe
    • Size 26KB
    • SHA256 07c7268c2f8a736f5c74f9dabfdf5e10c8a4580fdfcf11eaa7e20a88dd52cae8
    • MD5 SHA1 SHA512
    Score
    10/10
    njratnyan cattrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks