General

  • Target

    bDu0.exe

  • Size

    36KB

  • Sample

    220713-1aqv5sbahr

  • MD5

    4090a4de792e40394225bc4f20493c1d

  • SHA1

    405e5460b7802231f7abed8f64c895ef55afab99

  • SHA256

    9232e1d56401c66129e907d5dd132754b2dfaaaa7e7c69319d4c2bee51cc1d69

  • SHA512

    5db226415613e3e97047241e5bd7fbe4b1316f93f357b4aeae95df650ee1e4c9e40cb22efcddf6c05c03329ef31d0c8dba5a4fdc32b50d032f19cb4e5334e449

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

https://pastebin.com/raw/tb1hTSss:5000

Mutex

6a2634340fbf8a0a2c038c6263d49fd1

Attributes
  • reg_key

    6a2634340fbf8a0a2c038c6263d49fd1

  • splitter

    |'|'|

Targets

    • Target

      bDu0.exe

    • Size

      36KB

    • MD5

      4090a4de792e40394225bc4f20493c1d

    • SHA1

      405e5460b7802231f7abed8f64c895ef55afab99

    • SHA256

      9232e1d56401c66129e907d5dd132754b2dfaaaa7e7c69319d4c2bee51cc1d69

    • SHA512

      5db226415613e3e97047241e5bd7fbe4b1316f93f357b4aeae95df650ee1e4c9e40cb22efcddf6c05c03329ef31d0c8dba5a4fdc32b50d032f19cb4e5334e449

    Score
    6/10
    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks