Overview

overview

10

Static

static

10

Private DR 8.exe

windows7-x64

10

Private DR 8.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    715f1b0391a29ec938b33ab8efbeb1fb

  • Size

    14KB

  • Sample

    231222-f49j5abdg7

  • MD5

    715f1b0391a29ec938b33ab8efbeb1fb

  • SHA1

    c60d9cd7c292a535e5108421cfd05a93e7e41f8e

  • SHA256

    357f9d78f25616a32835ee27ef5106ffe17a25142443449bb91f74d3013032db

  • SHA512

    f4c92e343b5505dc57e2cfe76ab4b81779a6c8690cb740852c0dcb8639fe2454ba30910f868d9f1901c70c37a829bb1ed2f47c2e34c67bc252fc42c8d0ee53c7

  • SSDEEP

    384:f8N8LJKLvOktCzFcEtbcHmIQPXTD8uxjR5G4MuB6qD+YRjWf:f8NMKTMFKG5UuJGcZ3VWf

Score
10/10
njrathacked by hidden persontrojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Hacked By HiDDen PerSOn

C2

127.0.0.1:5552

Mutex

ccedfcf6c833355573619d64c1fe7aea

Attributes
  • reg_key

    ccedfcf6c833355573619d64c1fe7aea

  • splitter

    |'|'|

Targets

    • Target

      Private DR 8.exe

    • Size

      32KB

    • MD5

      3545a1d643a4bbe8254e6288ef8b8970

    • SHA1

      54c78dd9b1af967af5bae3436666b4cc6ec9981a

    • SHA256

      ce9f3a26c1dc03bdb6b44d8f21155c01481cfef00d52aed3e8cb2d127d9a0bf7

    • SHA512

      56cfac7a646b9a9c898131d714497af04c29f72aa05dcb4c680e384e62058af5bb136017e6a79a5e5b8d069d488f2651fa0ccddbf332ffd99b0975d63624e884

    • SSDEEP

      384:FwZ2iQY1yEccOrM5si+dCLp6dqs9dFPI4+hAVoTi+NlDQodg9TduS/EIGsJjwE7I:CI05cTvTdCmvsuouDuCEIGfRu+f

    Score
    10/10
    njrathacked by hidden persontrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks