General

  • Target
    28fe4acd97e6e3992f0e3a3f265682b0_NeikiAnalytics.exe
  • Size 23KB
  • Sample240525-16671ada25
  • SHA256 bb7d4f537d08dcd28fa51ecee81a411da0154da59d1d8b06840577384d3acbdb
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • njrat

Version
  • 0.7d

Botnet
  • jjj

C2
  • youri.mooo.com:1605

Mutex
  • e936a10f968ac948cd351c9629dbd36d

Attributes
  • reg_key

    e936a10f968ac948cd351c9629dbd36d

  • splitter

    |'|'|

Targets

    • Target
      28fe4acd97e6e3992f0e3a3f265682b0_NeikiAnalytics.exe
    • Size 23KB
    • SHA256 bb7d4f537d08dcd28fa51ecee81a411da0154da59d1d8b06840577384d3acbdb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Modifies Windows Firewall

MITRE ATT&CK Enterprise v15

Tasks