Overview

overview

10

Static

static

3

86946a821d...18.exe

windows7-x64

10

86946a821d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    86946a821dcf2ed5854e7c1d4da75421_JaffaCakes118
  • Size 81KB
  • Sample240531-ltff7adh3w
  • SHA256 f61581a730690a29311fdb8fb5ef970c8a437297450e3b8700ecd23473cb3135
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
njrathackedevasiontrojan

Malware Config

Extracted

Family

  • njrat

Version

  • 0.7d

Botnet

  • HacKed

C2

  • 127.0.0.1:5552

Mutex

  • 165d6ed988ac1dbec1627a1ca9899d84

Attributes
  • reg_key

    165d6ed988ac1dbec1627a1ca9899d84

  • splitter

    |'|'|

Targets

    • Target
      86946a821dcf2ed5854e7c1d4da75421_JaffaCakes118
    • Size 81KB
    • SHA256 f61581a730690a29311fdb8fb5ef970c8a437297450e3b8700ecd23473cb3135
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    njrathackedevasiontrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Modifies Windows Firewall

      evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks