Overview

overview

10

Static

static

Server.exe

windows7_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Server.exe

  • Size

    25KB

  • Sample

    220612-sxegmabdb5

  • MD5

    4a2e54e74503ddc6005c8f72e025943e

  • SHA1

    aaf965085024318dce3b9ffd6d96b3326d41b1e9

  • SHA256

    94fac7a812c6faf41727786c4e31c0375574fcaed192673cf058c5a7bf8194a0

  • SHA512

    cb4fd3640e2f61f963309b0c773264cb60cd880d4a5005820c6317cbcf1e5ac6a99fb5beb14558bba8c401d24666fe6c0a2ea6751a1c7726a4934bde42e31701

Score
10/10
njratgaytrojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

gay

C2

4.tcp.eu.ngrok.io:17260

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      Server.exe

    • Size

      25KB

    • MD5

      4a2e54e74503ddc6005c8f72e025943e

    • SHA1

      aaf965085024318dce3b9ffd6d96b3326d41b1e9

    • SHA256

      94fac7a812c6faf41727786c4e31c0375574fcaed192673cf058c5a7bf8194a0

    • SHA512

      cb4fd3640e2f61f963309b0c773264cb60cd880d4a5005820c6317cbcf1e5ac6a99fb5beb14558bba8c401d24666fe6c0a2ea6751a1c7726a4934bde42e31701

    Score
    10/10
    njratgaytrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks