Overview

overview

10

Static

static

10

3cee48eccc...bf.exe

windows7_x64

8

3cee48eccc...bf.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3cee48eccc92a60c6c57bcdf9c9c12735e4064e6b7d0f12e0385e35c829166bf

  • Size

    23KB

  • Sample

    220703-ffygysfgaj

  • MD5

    16b84dc3da35e7a412d7caff0dd1111b

  • SHA1

    3e255fa00b7a49709d66e214791d92929f0650df

  • SHA256

    3cee48eccc92a60c6c57bcdf9c9c12735e4064e6b7d0f12e0385e35c829166bf

  • SHA512

    04116b87bf1c636a7908f239ba8a994d99020667509e8223271daa6a03792a3aab7c478410b1c4a1550f67e705ba1a045018ab297a2f076ea962822e7bdd174e

Score
10/10
njrathackedevasiontrojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

165d6ed988ac1dbec1627a1ca9899d84

Attributes
  • reg_key

    165d6ed988ac1dbec1627a1ca9899d84

  • splitter

    |'|'|

Targets

    • Target

      3cee48eccc92a60c6c57bcdf9c9c12735e4064e6b7d0f12e0385e35c829166bf

    • Size

      23KB

    • MD5

      16b84dc3da35e7a412d7caff0dd1111b

    • SHA1

      3e255fa00b7a49709d66e214791d92929f0650df

    • SHA256

      3cee48eccc92a60c6c57bcdf9c9c12735e4064e6b7d0f12e0385e35c829166bf

    • SHA512

      04116b87bf1c636a7908f239ba8a994d99020667509e8223271daa6a03792a3aab7c478410b1c4a1550f67e705ba1a045018ab297a2f076ea962822e7bdd174e

    Score
    10/10
    evasionnjrattrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Modifies Windows Firewall

      evasion
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks