Overview

overview

10

Static

static

3

d33dec2799...53.exe

windows7-x64

10

d33dec2799...53.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d33dec279966da2024c05d5fde688253

  • Size

    1.2MB

  • Sample

    240318-l75y1aeb85

  • MD5

    d33dec279966da2024c05d5fde688253

  • SHA1

    74bde021ba65fdd33fd420568b6a2da406ac07e8

  • SHA256

    f17fd9ff93d1b3db6c3e4463d5ca5c11b99827890c58721d2860df75d4323705

  • SHA512

    67ec505fb9305493699af82de2054ebedcf033867bd9cd14bac7fef392d5f69ce9aaa61a408e67f346153aaa05c1c65aff8e0c63d99477bd04fc6e25c4262fd8

  • SSDEEP

    24576:ANA3R5drXPrfi4T6sNNuT0Zb7mnyxuYuroyvUC0l6:55jl6GuT0tmNTrTsCe6

Score
10/10
njratgoldtrojan

Malware Config

Extracted

Family

njrat

Version

20

Botnet

gold

C2

149.248.52.61:87

Mutex

165d6ed988ac

Attributes
  • reg_key

    165d6ed988ac

  • splitter

    |'|'|

Targets

    • Target

      d33dec279966da2024c05d5fde688253

    • Size

      1.2MB

    • MD5

      d33dec279966da2024c05d5fde688253

    • SHA1

      74bde021ba65fdd33fd420568b6a2da406ac07e8

    • SHA256

      f17fd9ff93d1b3db6c3e4463d5ca5c11b99827890c58721d2860df75d4323705

    • SHA512

      67ec505fb9305493699af82de2054ebedcf033867bd9cd14bac7fef392d5f69ce9aaa61a408e67f346153aaa05c1c65aff8e0c63d99477bd04fc6e25c4262fd8

    • SSDEEP

      24576:ANA3R5drXPrfi4T6sNNuT0Zb7mnyxuYuroyvUC0l6:55jl6GuT0tmNTrTsCe6

    Score
    10/10
    njratgoldtrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks