Overview

overview

10

Static

static

10

d4a1415217...ee.exe

windows7_x64

8

d4a1415217...ee.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d4a1415217de267fd69abf81125c6448b57d802b248732c019e20abf991783ee

  • Size

    31KB

  • Sample

    220625-ek4zvsddbm

  • MD5

    080bc8a89953c8ebfc9da1f88a23aac8

  • SHA1

    5a30d142fcf92d8c688db48ca4af83e22000da47

  • SHA256

    d4a1415217de267fd69abf81125c6448b57d802b248732c019e20abf991783ee

  • SHA512

    9cf6631b7fbf96dc51ba9360e18fb0094eb77b14faed5dbebbae0ab1bcf859b9857e791b2fe596d154276be02c8c10913e6cd28ea51f3fc1b7a4c12d5fbd3f9a

Score
10/10
njrat1evasiontrojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

1

C2

83.237.180.194:32339

Mutex

7d198d1920e1094c1599153c419926db

Attributes
  • reg_key

    7d198d1920e1094c1599153c419926db

  • splitter

    Y262SUCZ4UJJ

Targets

    • Target

      d4a1415217de267fd69abf81125c6448b57d802b248732c019e20abf991783ee

    • Size

      31KB

    • MD5

      080bc8a89953c8ebfc9da1f88a23aac8

    • SHA1

      5a30d142fcf92d8c688db48ca4af83e22000da47

    • SHA256

      d4a1415217de267fd69abf81125c6448b57d802b248732c019e20abf991783ee

    • SHA512

      9cf6631b7fbf96dc51ba9360e18fb0094eb77b14faed5dbebbae0ab1bcf859b9857e791b2fe596d154276be02c8c10913e6cd28ea51f3fc1b7a4c12d5fbd3f9a

    Score
    10/10
    evasionnjrattrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Modifies Windows Firewall

      evasion
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks