Resubmissions

03/05/2024, 18:27

240503-w3rkxsda3s10

03/05/2024, 18:19

240503-wye2bsch4y10

General

  • Target
    SolaraBETA (2).rar
  • Size 17.5MB
  • Sample240503-wye2bsch4y
  • SHA256 f89186713b407e35726be4e69f4ba49e9ef70250209a2e3ff7fb2b774640088b
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • njrat

Version
  • im523

Botnet
  • HacKed

C2
  • having-jackson.gl.at.ply.gg:56522

Mutex
  • 7c148ac38012fc3caa04b1bbe75feba0

Attributes
  • reg_key

    7c148ac38012fc3caa04b1bbe75feba0

  • splitter

    |'|'|

Targets

    • Target
      SolaraBETA (2)/Monaco/min/vs/basic-languages/java/java.js
    • Size 3KB
    • SHA256 ee57d3885b119a5585180caa2c26498bf6e6640b10481dc9677b7610198c4e2e
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      SolaraBETA (2)/Monaco/min/vs/basic-languages/javascript/javascript.js
    • Size 7KB
    • SHA256 e7276c9e1382aebb07c75f6f62d52f7df17ddb06eced55cbf2b6f0be6b22b113
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      SolaraBETA (2)/Monaco/min/vs/basic-languages/julia/julia.js
    • Size 7KB
    • SHA256 763d2d709cc767aebb86d7f47e094a2ff0ec6c2ff20db746087da25f5793cf1b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      SolaraBETA (2)/Monaco/min/vs/basic-languages/kotlin/kotlin.js
    • Size 4KB
    • SHA256 e4820fcf63e4c464499aab40ff948027987e1484a045a91741bba480fc71d687
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      SolaraBETA (2)/Monaco/min/vs/basic-languages/less/less.js
    • Size 4KB
    • SHA256 291122062f89179db9a9495490fa112aeb003b04cd68e51f34722e79fec05188
    • MD5 SHA1 SHA512 SSDEEP
    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Modifies Windows Firewall

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Target
      SolaraBETA (2)/Monaco/min/vs/basic-languages/lexon/lexon.js
    • Size 3KB
    • SHA256 d55482fd3ffccd1f243c9335dbc10504e0896ea0b27b9e5db8bd129c1aad8dd2
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      SolaraBETA (2)/Monaco/min/vs/basic-languages/liquid/liquid.js
    • Size 4KB
    • SHA256 ca01c2b1a36ab94e30542f3b936798b3b8d51c2bfc88789e416c26529e91d785
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      SolaraBETA (2)/Monaco/min/vs/basic-languages/lua/lua.js
    • Size 2KB
    • SHA256 4475c0f4d02c2c6145b097b80cc7e4c3af9246639d20869ff394fe70926cd942
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      SolaraBETA (2)/Monaco/min/vs/basic-languages/m3/m3.js
    • Size 3KB
    • SHA256 bcddb65cfdc3c63e67ccf57993ecea2f279b61f92ad046e096d980a706d23017
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      SolaraBETA (2)/Monaco/min/vs/basic-languages/markdown/markdown.js
    • Size 4KB
    • SHA256 66f8b288ede67f908cb776aeff8c9e24996182b878c5da7ffa4bd6f3cbc38a6b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      SolaraBETA (2)/Monaco/min/vs/basic-languages/mdx/mdx.js
    • Size 5KB
    • SHA256 12e41644e29f943e567e09043ac95f9afe3a12f78221662a7c35561424d30ab6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      SolaraBETA (2)/Monaco/min/vs/basic-languages/mips/mips.js
    • Size 3KB
    • SHA256 5ee4997c552f1f6bc4deca08bbe628b9369af09e5a94770be18cd419963d834d
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      SolaraBETA (2)/Monaco/min/vs/basic-languages/msdax/msdax.js
    • Size 5KB
    • SHA256 f53ec8830dba059c6f9ffe5d74ad6556372c927e4465ebeb6c27e1c7f915157d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      SolaraBETA (2)/Monaco/min/vs/basic-languages/mysql/mysql.js
    • Size 11KB
    • SHA256 ca45c24c9eccc351207c790fce382c66ee66e3b74562dec74f3ad306ccf1687a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      SolaraBETA (2)/Monaco/min/vs/basic-languages/objective-c/objective-c.js
    • Size 3KB
    • SHA256 15b5f02919df2434a0d0305c301cf6450c98e0076fbfee1baaef93d339b2102c
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      SolaraBETA (2)/Monaco/min/vs/basic-languages/pascal/pascal.js
    • Size 3KB
    • SHA256 ea9b0cd3df7ba28f7f9b4b484508d402096026c62399995278931cb91b45f3a1
    • MD5 SHA1 SHA512
    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

hackednjrat
Score
10/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

njrathackedevasionexecutionpersistencetrojan
Score
10/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10