Overview

overview

10

Static

static

10

de0913a5c3...9a.exe

windows7_x64

8

de0913a5c3...9a.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de0913a5c356a8cdd5dda481dd2bf0814953704524779aa80e0c2483579e439a

  • Size

    31KB

  • Sample

    220520-1j69gseab5

  • MD5

    39624409a0ea93b08013c35723bf0836

  • SHA1

    1e55c57d19743d31521fd3f786b77195919644c9

  • SHA256

    de0913a5c356a8cdd5dda481dd2bf0814953704524779aa80e0c2483579e439a

  • SHA512

    52cb8d118df810bbecf53c98ec3e7d5e4aba35a0aafbf1acb76abbd98cfa1747116e070d52dffbd03d6b29105c129c3af1f1946b7886aa06f58ea250e8d82f6b

Score
10/10
njratbananasevasiontrojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Bananas

C2

25.45.164.207:5552

Mutex

692330935ff2f36ffe4ee0cf6504300a

Attributes
  • reg_key

    692330935ff2f36ffe4ee0cf6504300a

  • splitter

    Y262SUCZ4UJJ

Targets

    • Target

      de0913a5c356a8cdd5dda481dd2bf0814953704524779aa80e0c2483579e439a

    • Size

      31KB

    • MD5

      39624409a0ea93b08013c35723bf0836

    • SHA1

      1e55c57d19743d31521fd3f786b77195919644c9

    • SHA256

      de0913a5c356a8cdd5dda481dd2bf0814953704524779aa80e0c2483579e439a

    • SHA512

      52cb8d118df810bbecf53c98ec3e7d5e4aba35a0aafbf1acb76abbd98cfa1747116e070d52dffbd03d6b29105c129c3af1f1946b7886aa06f58ea250e8d82f6b

    Score
    10/10
    evasionnjrattrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Modifies Windows Firewall

      evasion
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks