Overview

overview

10

Static

static

10

Server.exe

windows7-x64

10

Server.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Server.exe

  • Size

    43KB

  • Sample

    240613-asfj1s1bjr

  • MD5

    ae39bd7d279a8690138fa777f817e349

  • SHA1

    392e252bd6e25a4503e912fe951cfdc82a3ff876

  • SHA256

    857264595c877f796f23b52d6658a540eeb209dabac61a40b50b741e0a7a4cea

  • SHA512

    bcdef31a0ca7fba3ed51eeb5aa753202de045016ea043b6f3357ae37ea6a6da742fdb3201ee0294b46987e76b212ed01d99998132215890ebfa4c66ff5e18016

  • SSDEEP

    384:AZyLlQt+3qpyeKZdaJBEv8FIVsVGVuuAzQIij+ZsNO3PlpJKkkjh/TzF7pWnPA/l:m5wageMd+tF3uXQ/oB3+L

Score
10/10
njrathackedpersistencetrojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

listing-trackbacks.gl.at.ply.gg:15337:8848

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      Server.exe

    • Size

      43KB

    • MD5

      ae39bd7d279a8690138fa777f817e349

    • SHA1

      392e252bd6e25a4503e912fe951cfdc82a3ff876

    • SHA256

      857264595c877f796f23b52d6658a540eeb209dabac61a40b50b741e0a7a4cea

    • SHA512

      bcdef31a0ca7fba3ed51eeb5aa753202de045016ea043b6f3357ae37ea6a6da742fdb3201ee0294b46987e76b212ed01d99998132215890ebfa4c66ff5e18016

    • SSDEEP

      384:AZyLlQt+3qpyeKZdaJBEv8FIVsVGVuuAzQIij+ZsNO3PlpJKkkjh/TzF7pWnPA/l:m5wageMd+tF3uXQ/oB3+L

    Score
    10/10
    njrathackedpersistencetrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks