General

  • Target

    b18597273516288fa85ebeda01096bf2_JaffaCakes118

  • Size

    43KB

  • Sample

    240616-dx9v7s1gkk

  • MD5

    b18597273516288fa85ebeda01096bf2

  • SHA1

    9bfc26af35721ba842205cb1e441840dbe489bcd

  • SHA256

    0e96b60732c0116c824e70dac0f032346b82fda652cad33136d31def380c9664

  • SHA512

    88b3c9560ec6571df3dcd1dd8279eb5ff6ef7349db5077724ec9324e0145425092f28396c6755a8271b449bea69c1db3cef855d12c9a131b445167ee6c608cc8

  • SSDEEP

    384:38ZySav3VarE8yTB1FqrkMwEnwpai0+dzEIij+ZsNO3PlpJKkkjh/TzF7pWnYBgm:36ZS3MY5TnFqrxQpbuXQ/olp+L

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

ddddl

C2

8.202.167.202:1080

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      b18597273516288fa85ebeda01096bf2_JaffaCakes118

    • Size

      43KB

    • MD5

      b18597273516288fa85ebeda01096bf2

    • SHA1

      9bfc26af35721ba842205cb1e441840dbe489bcd

    • SHA256

      0e96b60732c0116c824e70dac0f032346b82fda652cad33136d31def380c9664

    • SHA512

      88b3c9560ec6571df3dcd1dd8279eb5ff6ef7349db5077724ec9324e0145425092f28396c6755a8271b449bea69c1db3cef855d12c9a131b445167ee6c608cc8

    • SSDEEP

      384:38ZySav3VarE8yTB1FqrkMwEnwpai0+dzEIij+ZsNO3PlpJKkkjh/TzF7pWnYBgm:36ZS3MY5TnFqrxQpbuXQ/olp+L

    Score
    10/10
    • njRAT/Bladabindi

      Widely used RAT written in .NET.

MITRE ATT&CK Matrix

Tasks