General

  • Target

    d9f2b22eda3441624144b5867d8127cd568653da889a4aac1f8d5e655f8e8691

  • Size

    43KB

  • Sample

    240525-heq3lahe9v

  • MD5

    5f77b2c53a3b561eda6eeb02a213d01e

  • SHA1

    97db553bd691c1d868e88a00ac2a38f923ad2ae0

  • SHA256

    d9f2b22eda3441624144b5867d8127cd568653da889a4aac1f8d5e655f8e8691

  • SHA512

    67ab2df1a139d6b53af0c5977ad637bcb201dca2715fc2d55ed497fed5f6a548dc716f29fb57cb9ef72f1e47f7680c30750e591ac1ea07ec016f802a6aa93578

  • SSDEEP

    768:Y5fRtsYZGKbEaG1AUpuzf/uuXQ/omzuC+L:Y5fRtsQbEaG1AUMzf/uuXQQmzuCM

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

these-accommodation.gl.at.ply.gg:39657

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      d9f2b22eda3441624144b5867d8127cd568653da889a4aac1f8d5e655f8e8691

    • Size

      43KB

    • MD5

      5f77b2c53a3b561eda6eeb02a213d01e

    • SHA1

      97db553bd691c1d868e88a00ac2a38f923ad2ae0

    • SHA256

      d9f2b22eda3441624144b5867d8127cd568653da889a4aac1f8d5e655f8e8691

    • SHA512

      67ab2df1a139d6b53af0c5977ad637bcb201dca2715fc2d55ed497fed5f6a548dc716f29fb57cb9ef72f1e47f7680c30750e591ac1ea07ec016f802a6aa93578

    • SSDEEP

      768:Y5fRtsYZGKbEaG1AUpuzf/uuXQ/omzuC+L:Y5fRtsQbEaG1AUMzf/uuXQQmzuCM

    Score
    10/10
    • njRAT/Bladabindi

      Widely used RAT written in .NET.

MITRE ATT&CK Matrix

Tasks