General

  • Target

    bCC5.exe

  • Size

    36KB

  • Sample

    220713-z3v5wsahgp

  • MD5

    53674af745017761f1aa916313155354

  • SHA1

    8029b5d289266493bb9c064188e7e9680703d0c4

  • SHA256

    f1df9d46ece8c0d69d030b4f8c43ee2d796aa0cb76c7573baddd6f792cd5b525

  • SHA512

    a500bd8a25427ec87a7a8fa8d217d24b7bab3f195338596c0b458cf79fdca3e1ed6fa3da83de2518d24b253ac16aaf0a10f04342f874292cb8ed2c3c1e20ff37

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

https://pastebin.com/raw/xEw1j6fY:5552

Mutex

6a2634340fbf8a0a2c038c6263d49fd1

Attributes
  • reg_key

    6a2634340fbf8a0a2c038c6263d49fd1

  • splitter

    |'|'|

Targets

    • Target

      bCC5.exe

    • Size

      36KB

    • MD5

      53674af745017761f1aa916313155354

    • SHA1

      8029b5d289266493bb9c064188e7e9680703d0c4

    • SHA256

      f1df9d46ece8c0d69d030b4f8c43ee2d796aa0cb76c7573baddd6f792cd5b525

    • SHA512

      a500bd8a25427ec87a7a8fa8d217d24b7bab3f195338596c0b458cf79fdca3e1ed6fa3da83de2518d24b253ac16aaf0a10f04342f874292cb8ed2c3c1e20ff37

    Score
    10/10
    • suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

      suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks