njrat | f2a62fb8daca9f557351d98508d973222e9b8cd32f8777d5bdb51718361ff2f2 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
28-03-2024 12:08

Sharing

Report Analysis Logs

General

Target

0532b10bba03e7dd5671ab51015b204a_JaffaCakes118.exe
Size

481KB
MD5

0532b10bba03e7dd5671ab51015b204a
SHA1

02f9e72baf980fd9438336bce4e18c69c1ccfbb3
SHA256

f2a62fb8daca9f557351d98508d973222e9b8cd32f8777d5bdb51718361ff2f2
SHA512

6351700437ff5feeda5b3a3101ebf27eafdfa4d8880761ec7d199931f73a741ad4519e4643ceaa1be7b0a84403510c4e8678a2c4e2f5e7cfffd32364256d1c88
SSDEEP

3072:EO9BEZ57xfUFKLQBO3kywtWDc5Cfo5+2F62W/8NyzohGX8F67rTsV6/ZRETJtHw4:99OEHLD

Score

10^/10

njrat trojan

Malware Config

Signatures

njRAT/Bladabindi
Widely used RAT written in .NET.
trojan njrat

C:\Users\Admin\AppData\Local\Temp\0532b10bba03e7dd5671ab51015b204a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0532b10bba03e7dd5671ab51015b204a_JaffaCakes118.exe"
1⤵
PID:3036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3036-0-0x0000000000F10000-0x0000000000F8E000-memory.dmp

Filesize
504KB

Download
memory/3036-1-0x00000000742A0000-0x000000007498E000-memory.dmp

Filesize
6.9MB

Download
memory/3036-2-0x0000000004900000-0x0000000004940000-memory.dmp

Filesize
256KB

Download
memory/3036-3-0x0000000004900000-0x0000000004940000-memory.dmp

Filesize
256KB

Download
memory/3036-4-0x00000000742A0000-0x000000007498E000-memory.dmp

Filesize
6.9MB

Download
memory/3036-5-0x0000000004900000-0x0000000004940000-memory.dmp

Filesize
256KB

Download