Overview

overview

10

Static

static

10

bDTe.exe

windows7-x64

7

bDTe.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bDTe.exe

  • Size

    36KB

  • Sample

    220803-bjcbnsded5

  • MD5

    0607fd9be8493919cc4ff70130cfcb73

  • SHA1

    a4c89d60bf22c59951a7d1ff2d5c60ab8ef68fcb

  • SHA256

    94035bc4205d2c7a1d3a8890e7c68bcd73213b0871523b4c773cbc9bedea05b6

  • SHA512

    43affc3532f74c92d66f12c6ce94b453c33761305fe51c77aeded84f0e86b1a43581a43f60b6b2d1acc784275b6b48e835d00a76d17ea9d49f164b7df60f3334

Score
10/10
njrathacked

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

blackid-48411.portmap.io:6522

Mutex

6a2634340fbf8a0a2c038c6263d49fd1

Attributes
  • reg_key

    6a2634340fbf8a0a2c038c6263d49fd1

  • splitter

    |'|'|

Targets

    • Target

      bDTe.exe

    • Size

      36KB

    • MD5

      0607fd9be8493919cc4ff70130cfcb73

    • SHA1

      a4c89d60bf22c59951a7d1ff2d5c60ab8ef68fcb

    • SHA256

      94035bc4205d2c7a1d3a8890e7c68bcd73213b0871523b4c773cbc9bedea05b6

    • SHA512

      43affc3532f74c92d66f12c6ce94b453c33761305fe51c77aeded84f0e86b1a43581a43f60b6b2d1acc784275b6b48e835d00a76d17ea9d49f164b7df60f3334

    Score
    7/10

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks