Overview

overview

10

Static

static

3

c61c339a98...18.exe

windows7-x64

10

c61c339a98...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c61c339a984de868ae12a1061e8d3610_JaffaCakes118

  • Size

    25KB

  • Sample

    240828-desh7stfrp

  • MD5

    c61c339a984de868ae12a1061e8d3610

  • SHA1

    56ccbfc8b6f9a01dc55113d3e3b3e80b9058e6eb

  • SHA256

    7f0eb032a323c7d431d8d65b6b9ebfa6a43bb69a6c33199c750fef5310227348

  • SHA512

    a082698d693afa3ddb0764b8867f11387dfb59f07438db78084ac137ca656d81b9f6f5f252b10ea6b66a2691e68aac86b0c6842798eeaf3e52a92090605862f0

  • SSDEEP

    768:svpZsBPgtvfUwHJGyYFu9wqfU/Xd+LWysNh:Qi1gNUKwyPRMF+Sh

Score
10/10
njrathackedtrojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

109.62.136.78:1604

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      c61c339a984de868ae12a1061e8d3610_JaffaCakes118

    • Size

      25KB

    • MD5

      c61c339a984de868ae12a1061e8d3610

    • SHA1

      56ccbfc8b6f9a01dc55113d3e3b3e80b9058e6eb

    • SHA256

      7f0eb032a323c7d431d8d65b6b9ebfa6a43bb69a6c33199c750fef5310227348

    • SHA512

      a082698d693afa3ddb0764b8867f11387dfb59f07438db78084ac137ca656d81b9f6f5f252b10ea6b66a2691e68aac86b0c6842798eeaf3e52a92090605862f0

    • SSDEEP

      768:svpZsBPgtvfUwHJGyYFu9wqfU/Xd+LWysNh:Qi1gNUKwyPRMF+Sh

    Score
    10/10
    njrathackedtrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks