Analysis
-
max time kernel
158s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30-12-2023 07:32
General
-
Target
1238608314b0d93709ac127fa5fddb88.exe
-
Size
161KB
-
MD5
1238608314b0d93709ac127fa5fddb88
-
SHA1
351efa7778640edaebb83fc0805dabd4efafa1eb
-
SHA256
c90631e830903499241284f0c16e0b11d85b441616a64481b198ae3d3c90d959
-
SHA512
36e711c54716e1ebd65648ae11086319b7930a13c8994674183f14becb27c205e9079e662b6fdde07e1fb534e9dfa16717784428e9fd4c3952b14fa92e5cd1c2
-
SSDEEP
3072:HH/vep0qYxiq9IPn8qMRzwjmuTY/CRI3m:HH+iqYp9bRz05TxI3
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
HacKed
Mutex
1d0b0ba9a8de0813538520b8b09551e2
Attributes
-
reg_key
1d0b0ba9a8de0813538520b8b09551e2
-
splitter
|'|'|
Signatures
-
njRAT/Bladabindi
Widely used RAT written in .NET.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\1238608314b0d93709ac127fa5fddb88.exe"C:\Users\Admin\AppData\Local\Temp\1238608314b0d93709ac127fa5fddb88.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.7MB
-
Filesize
192KB
-
Filesize
624KB
-
Filesize
64KB
-
Filesize
48KB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
5.6MB