Overview

overview

10

Static

static

10

c6d31efacf...18.exe

windows7-x64

10

c6d31efacf...18.exe

windows10-2004-x64

10

Resubmissions

28/08/2024, 14:17

240828-rly68atbpl 10

28/08/2024, 12:12

240828-pdjepazbkp 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6d31efacf09b71cee1a3700f6308e3c_JaffaCakes118

  • Size

    43KB

  • Sample

    240828-rly68atbpl

  • MD5

    c6d31efacf09b71cee1a3700f6308e3c

  • SHA1

    4864b32d2cbb2b8c1ce52efeba1f8fc84eb91f7d

  • SHA256

    609ed19dfd3781049679293e44aaa0eb3acf8f1adbe1e08326066969c2e6ef9b

  • SHA512

    e8c4d41d9fafc980279e479bab7655292541a9cddbd52a79d437c50e9c8ef9c36c9c7a933a997e4af3d6634e3ee4c99fa31aab8608ae4f46dbc929600ebf7213

  • SSDEEP

    384:aZya7sVqb08yPGpJQvwosEoTWcfz0Iij+ZsNO3PlpJKkkjh/TzF7pWnqZgreT0pe:477s8Y5PGTi5sTzuXQ/oPx+L

Score
10/10
njratadolfdiscoverytrojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

Adolf

C2

buybuy.ddns.net:5552

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      c6d31efacf09b71cee1a3700f6308e3c_JaffaCakes118

    • Size

      43KB

    • MD5

      c6d31efacf09b71cee1a3700f6308e3c

    • SHA1

      4864b32d2cbb2b8c1ce52efeba1f8fc84eb91f7d

    • SHA256

      609ed19dfd3781049679293e44aaa0eb3acf8f1adbe1e08326066969c2e6ef9b

    • SHA512

      e8c4d41d9fafc980279e479bab7655292541a9cddbd52a79d437c50e9c8ef9c36c9c7a933a997e4af3d6634e3ee4c99fa31aab8608ae4f46dbc929600ebf7213

    • SSDEEP

      384:aZya7sVqb08yPGpJQvwosEoTWcfz0Iij+ZsNO3PlpJKkkjh/TzF7pWnqZgreT0pe:477s8Y5PGTi5sTzuXQ/oPx+L

    Score
    10/10
    njratadolfdiscoverytrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks