Overview

overview

10

Static

static

3

30607346a5...18.exe

windows7-x64

10

30607346a5...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    30607346a5058f4363483315acf0f4b5_JaffaCakes118
  • Size 149KB
  • Sample240510-wrhtmsde28
  • SHA256 3f49abea9a93077403de2325821b17a21a1d74a396c934d8d38771e19eb5d0e8
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
njrattrojan

Malware Config

Extracted

Family

  • njrat

C2

  • 173.225.115.127:4444

Mutex

  • 9ade17d191a745f38

Attributes
  • reg_key

    9ade17d191a745f38

  • splitter

    @!#&^%$

Targets

    • Target
      30607346a5058f4363483315acf0f4b5_JaffaCakes118
    • Size 149KB
    • SHA256 3f49abea9a93077403de2325821b17a21a1d74a396c934d8d38771e19eb5d0e8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    njrattrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks