njrat | a023a728fab1ffb9b35cc8fe79ccb098b32221f7ec85ff8f8ed35e3184134ba5 | Triage

Sharing

General

Target

dc3395bc9664f8cf0308634ec11bbd18_JaffaCakes118
Size

23KB
Sample

240912-mh6dxasarl
MD5

dc3395bc9664f8cf0308634ec11bbd18
SHA1

4f7befb42a13aabf16e8d8aedc539553fb2a95a7
SHA256

a023a728fab1ffb9b35cc8fe79ccb098b32221f7ec85ff8f8ed35e3184134ba5
SHA512

ad22942c728549237510febd6cf8b4a5f8caf5e5db5cf63f348a3591a65d78dad20d073722847485c3605bb06a826bba7ec50867cf65c7d7dd99341c9eb189f2
SSDEEP

384:bweXCQIreJig/8Z7SS1fEBpng6tgL2IBPZVmRvR6JZlbw8hqIusZzZSUL:cLq411eRpcnuBO

Score

10^/10

njrat anona discovery trojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

anona

C2

anona12345.hopto.org:1177

Mutex

43d2c4a04d4003a3838ff896204e3c44

Attributes

reg_key
43d2c4a04d4003a3838ff896204e3c44
splitter
|'|'|

Targets

- Target
  
  dc3395bc9664f8cf0308634ec11bbd18_JaffaCakes118
- Size
  
  23KB
- MD5
  
  dc3395bc9664f8cf0308634ec11bbd18
- SHA1
  
  4f7befb42a13aabf16e8d8aedc539553fb2a95a7
- SHA256
  
  a023a728fab1ffb9b35cc8fe79ccb098b32221f7ec85ff8f8ed35e3184134ba5
- SHA512
  
  ad22942c728549237510febd6cf8b4a5f8caf5e5db5cf63f348a3591a65d78dad20d073722847485c3605bb06a826bba7ec50867cf65c7d7dd99341c9eb189f2
- SSDEEP
  
  384:bweXCQIreJig/8Z7SS1fEBpng6tgL2IBPZVmRvR6JZlbw8hqIusZzZSUL:cLq411eRpcnuBO
Score

10^/10

njrat anona discovery trojan
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratanonadiscoverytrojan

behavioral2