General

  • Target
    1c00c8e24fa814e9741571c74df2f71f.exe
  • Size 658KB
  • Sample230905-c4jf6adb68
  • SHA256 8625ed4acd5cb983bad7b6809a517c3525497a72c6b87442e10410c0c02f723a
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • njrat

Version
  • 0.7NC

Botnet
  • NYAN CAT

C2
  • seznam.zapto.org:5050

Mutex
  • 587285a8a9a841d

Attributes
  • reg_key

    587285a8a9a841d

  • splitter

    @!#&^%$

Targets

    • Target
      1c00c8e24fa814e9741571c74df2f71f.exe
    • Size 658KB
    • SHA256 8625ed4acd5cb983bad7b6809a517c3525497a72c6b87442e10410c0c02f723a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks