General

  • Target

    be7978477876f7ad6cfb8aa7e23d0f8a

  • Size

    2.1MB

  • Sample

    240310-nezydsbg8y

  • MD5

    be7978477876f7ad6cfb8aa7e23d0f8a

  • SHA1

    6da15280247d06c9f58cf77a2b532d18117f3d89

  • SHA256

    b622bc1010f3092f15d23c72e07b755236c7d537a211b39c4d4de7711a5052eb

  • SHA512

    3dc64ff5cb4bfe713d0aab32e42f4a21a222fe0c13cc649c0c6d7ed51a354bde7471c94981177d56e91b4459a3e565ba3f4c13cef731cfca00bb4c23917f91cc

  • SSDEEP

    24576:VOR2EjzQIEjzQ911EjzQIEjzQIEjzQIEjzQIEjzQ3EjzQIEjzQIEjzQIEjzQIEjf:VOYcZ/ccccTccccccc

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

milla.publicvm.com:5050

Mutex

c3218b1f59

Attributes
  • reg_key

    c3218b1f59

  • splitter

    @!#&^%$

Targets

    • Target

      be7978477876f7ad6cfb8aa7e23d0f8a

    • Size

      2.1MB

    • MD5

      be7978477876f7ad6cfb8aa7e23d0f8a

    • SHA1

      6da15280247d06c9f58cf77a2b532d18117f3d89

    • SHA256

      b622bc1010f3092f15d23c72e07b755236c7d537a211b39c4d4de7711a5052eb

    • SHA512

      3dc64ff5cb4bfe713d0aab32e42f4a21a222fe0c13cc649c0c6d7ed51a354bde7471c94981177d56e91b4459a3e565ba3f4c13cef731cfca00bb4c23917f91cc

    • SSDEEP

      24576:VOR2EjzQIEjzQ911EjzQIEjzQIEjzQIEjzQIEjzQ3EjzQIEjzQIEjzQIEjzQIEjf:VOYcZ/ccccTccccccc

    Score
    10/10
    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks