Overview

overview

10

Static

static

3

dd7950d693...18.exe

windows7-x64

10

dd7950d693...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd7950d693aa3c3d1bac162fbc706db8_JaffaCakes118

  • Size

    25KB

  • Sample

    240913-cr9skszakc

  • MD5

    dd7950d693aa3c3d1bac162fbc706db8

  • SHA1

    19fefa34076c05a5039b3dda98ba73c4a232da8c

  • SHA256

    b673bb347994c307b329f97a9f186607f6d6f3f7d344ee1eb5a42f5331056ca7

  • SHA512

    0d40ea9b171d7649464b12ae3100f59848b83a405e9968a60eba7320006cf9b7672bbd74ca3bb22af3678368558ae8d631a1e283d743d93b03a7cdefcc7120a8

  • SSDEEP

    768:svpa/08EHb9txhTJ2jKpJf5c+8eSGJX7Dcpp:QKeHbTfd2jEJhcFbGhDcv

Score
10/10
njrathackedtrojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      dd7950d693aa3c3d1bac162fbc706db8_JaffaCakes118

    • Size

      25KB

    • MD5

      dd7950d693aa3c3d1bac162fbc706db8

    • SHA1

      19fefa34076c05a5039b3dda98ba73c4a232da8c

    • SHA256

      b673bb347994c307b329f97a9f186607f6d6f3f7d344ee1eb5a42f5331056ca7

    • SHA512

      0d40ea9b171d7649464b12ae3100f59848b83a405e9968a60eba7320006cf9b7672bbd74ca3bb22af3678368558ae8d631a1e283d743d93b03a7cdefcc7120a8

    • SSDEEP

      768:svpa/08EHb9txhTJ2jKpJf5c+8eSGJX7Dcpp:QKeHbTfd2jEJhcFbGhDcv

    Score
    10/10
    njrathackedtrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks