General

  • Target

    85d3ccb4310236b9c89e31897a237fd455e2caf08c8ad0972b4e4cf3221923d1

  • Size

    439KB

  • Sample

    240604-cbk5aahd3z

  • MD5

    642cf65b57e3f0e77aff367333a81b8c

  • SHA1

    5cfe8c2331cbd1b32a7b60c299ed2cd0388d0db0

  • SHA256

    85d3ccb4310236b9c89e31897a237fd455e2caf08c8ad0972b4e4cf3221923d1

  • SHA512

    477f38817e6fe118078d59c98dbe2411ad55853f8c918c0d6eb8248f7e79691c1148b1411810eeb31c43634330a3dbcfd782a9d78ca991c9a4e67e4d13596922

  • SSDEEP

    12288:oCirCDE3aEMrryj8RRf9r3TrgMuPv7f41j2vPOL0c:viUE3krmjqdTrgMu7s2+L0c

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

seznam.zapto.org:5050

Mutex

51f5e4b21a09

Attributes
  • reg_key

    51f5e4b21a09

  • splitter

    @!#&^%$

Targets

    • Target

      1881cfa52f02f01bd78e903782e69cfbe167f8673b8828371366736f24592518.exe

    • Size

      969KB

    • MD5

      12daff9aeb48e2e9f3d2e357b9636f5a

    • SHA1

      edb9e465c3ec6b1935b5ab307a22f08f409d829d

    • SHA256

      1881cfa52f02f01bd78e903782e69cfbe167f8673b8828371366736f24592518

    • SHA512

      5390e065174e56cbde78869fb65a0d33be66452674db961c00bb72c2081a8b6156b7d68fd7a0ce20fdedd6c01fcb5418056c3542d6122f1668fcf76c452f30f2

    • SSDEEP

      12288:NaSv30fd/rz2iNcHcvn0+xAEbZUVFR9uqWjqf00lU6:530V/rz13TPUVF4j6

    Score
    10/10
    • njRAT/Bladabindi

      Widely used RAT written in .NET.

MITRE ATT&CK Matrix

Tasks