njrat | 43a75781e05e4ccbb8cb4dc3d4b1fea003f561071c9a9408d7e7a94ba22b647c | Triage

Sharing

General

Target

e24470ba45fb82640f5a0f6bf8cce6cd_JaffaCakes118
Size

31KB
Sample

240915-mh9rbsyfpb
MD5

e24470ba45fb82640f5a0f6bf8cce6cd
SHA1

291f7a4fe51a5eeb389682554641d45e9cf19c6d
SHA256

43a75781e05e4ccbb8cb4dc3d4b1fea003f561071c9a9408d7e7a94ba22b647c
SHA512

48ba7c3f0ada8010355c072a8aad789faaa784b85f98b884ba63383115b1921b3b4a3b2edfac6a4b5502575215650b00243e67d62b8565b6f47628d4637e6f2e
SSDEEP

768:/BhOhb13hdwzxLy3AcEOv1MRvK/QmIDUu0tiJoi3Jj:50Z6256AQVkqj

Score

10^/10

njrat steam ot seni discovery trojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Steam ot seni

C2

109.202.54.48:6522

Mutex

daa92e06979a8122867a80f61cf3dc51

Attributes

reg_key
daa92e06979a8122867a80f61cf3dc51
splitter
Y262SUCZ4UJJ

Targets

- Target
  
  e24470ba45fb82640f5a0f6bf8cce6cd_JaffaCakes118
- Size
  
  31KB
- MD5
  
  e24470ba45fb82640f5a0f6bf8cce6cd
- SHA1
  
  291f7a4fe51a5eeb389682554641d45e9cf19c6d
- SHA256
  
  43a75781e05e4ccbb8cb4dc3d4b1fea003f561071c9a9408d7e7a94ba22b647c
- SHA512
  
  48ba7c3f0ada8010355c072a8aad789faaa784b85f98b884ba63383115b1921b3b4a3b2edfac6a4b5502575215650b00243e67d62b8565b6f47628d4637e6f2e
- SSDEEP
  
  768:/BhOhb13hdwzxLy3AcEOv1MRvK/QmIDUu0tiJoi3Jj:50Z6256AQVkqj
Score

10^/10

njrat steam ot seni discovery trojan
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

steam ot seninjrat

behavioral1

njratsteam ot senidiscoverytrojan

behavioral2