General

  • Target

    4d25873976ab5ad9ff4c5c493c1e594c_JaffaCakes118

  • Size

    25KB

  • Sample

    240516-1kdnkahg8z

  • MD5

    4d25873976ab5ad9ff4c5c493c1e594c

  • SHA1

    4c1fc465246d324aa034357baf8c14e8b9b6ed38

  • SHA256

    7a1478300f716986ea695efa848e0184567029051d48991b0625b52493ca4c96

  • SHA512

    a058ad6ce3db2ea6384b059a837dd9d94bc156feba2ab1bbd7ff0909f21e1c1ebb0ada82bf9826aff23288192a4caa57d2bd26a7f685dd0ed5fc6a29a0870d36

  • SSDEEP

    384:sv3ZIj+TLZ/Lwa2sa+iOpbg1LEvlyxIV/JtFpaDFODfNTOkk56RZKNOvo6fhQp3R:svpbnyaCOpbg1A0CRt2ZOF+0QARaph

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

192.168.0.166:7777

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      4d25873976ab5ad9ff4c5c493c1e594c_JaffaCakes118

    • Size

      25KB

    • MD5

      4d25873976ab5ad9ff4c5c493c1e594c

    • SHA1

      4c1fc465246d324aa034357baf8c14e8b9b6ed38

    • SHA256

      7a1478300f716986ea695efa848e0184567029051d48991b0625b52493ca4c96

    • SHA512

      a058ad6ce3db2ea6384b059a837dd9d94bc156feba2ab1bbd7ff0909f21e1c1ebb0ada82bf9826aff23288192a4caa57d2bd26a7f685dd0ed5fc6a29a0870d36

    • SSDEEP

      384:sv3ZIj+TLZ/Lwa2sa+iOpbg1LEvlyxIV/JtFpaDFODfNTOkk56RZKNOvo6fhQp3R:svpbnyaCOpbg1A0CRt2ZOF+0QARaph

    Score
    10/10
    • njRAT/Bladabindi

      Widely used RAT written in .NET.

MITRE ATT&CK Matrix

Tasks