Overview

overview

10

Static

static

3

df5d144339...18.exe

windows7-x64

10

df5d144339...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df5d1443391e0c73f2ef37646feda565_JaffaCakes118

  • Size

    25KB

  • Sample

    240914-dfdfnstbnr

  • MD5

    df5d1443391e0c73f2ef37646feda565

  • SHA1

    3e344bf128ea8dcaa630e07b4b45e06fb42a547f

  • SHA256

    523f2d292173cb9e037da10c22522cf3588472e688c14434872cde4660b30b11

  • SHA512

    bea02d1330d6ecd1486a2a78a69401920d6a52f3fd5f82aba317d797f558b519b52fae12baf398716c51ad434ea6852f40a813aaa6bb0cd7b9839a1f6674850a

  • SSDEEP

    768:svpI/08EHb9txhTJ2jKpJf5c+8eSGJX7Dcpp:QEeHbTfd2jEJhcFbGhDcv

Score
10/10
njrathackedtrojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      df5d1443391e0c73f2ef37646feda565_JaffaCakes118

    • Size

      25KB

    • MD5

      df5d1443391e0c73f2ef37646feda565

    • SHA1

      3e344bf128ea8dcaa630e07b4b45e06fb42a547f

    • SHA256

      523f2d292173cb9e037da10c22522cf3588472e688c14434872cde4660b30b11

    • SHA512

      bea02d1330d6ecd1486a2a78a69401920d6a52f3fd5f82aba317d797f558b519b52fae12baf398716c51ad434ea6852f40a813aaa6bb0cd7b9839a1f6674850a

    • SSDEEP

      768:svpI/08EHb9txhTJ2jKpJf5c+8eSGJX7Dcpp:QEeHbTfd2jEJhcFbGhDcv

    Score
    10/10
    njrathackedtrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks