Resubmissions

18-09-2024 04:16

240918-ev7hqssgmn 10

18-09-2024 03:42

240918-d9mlfa1gql 10

General

  • Target

    e842a8a3c48560b118ad2fdcab6b01aa_JaffaCakes118

  • Size

    124KB

  • Sample

    240918-ev7hqssgmn

  • MD5

    e842a8a3c48560b118ad2fdcab6b01aa

  • SHA1

    1ae744306e0ca219d5d3a71b7b3c561556bb06bb

  • SHA256

    71a60a3a3c02e228da746c4ca56cb05e7fc547ae257aee65cb8c37fc7c8b1be8

  • SHA512

    b2fa5a0818247c03620b24298785298f224ac752e134a72c6da256b23497c8748d10fabd87e6647715e9069bc55eb046a6c835ea4551e42edf3818fe148d1db7

  • SSDEEP

    1536:vdw+IkzrUErhvozUQzHpxZvbS3gTotapQAVwq86XiMPZw/a7KVrlee:vdwunv1oz1xRbSQToEp3w04aK0e

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

127.0.0.1:789

Mutex

018af7de9673644d23451473d09bedbd

Attributes
  • reg_key

    018af7de9673644d23451473d09bedbd

  • splitter

    |'|'|

Targets

    • Target

      e842a8a3c48560b118ad2fdcab6b01aa_JaffaCakes118

    • Size

      124KB

    • MD5

      e842a8a3c48560b118ad2fdcab6b01aa

    • SHA1

      1ae744306e0ca219d5d3a71b7b3c561556bb06bb

    • SHA256

      71a60a3a3c02e228da746c4ca56cb05e7fc547ae257aee65cb8c37fc7c8b1be8

    • SHA512

      b2fa5a0818247c03620b24298785298f224ac752e134a72c6da256b23497c8748d10fabd87e6647715e9069bc55eb046a6c835ea4551e42edf3818fe148d1db7

    • SSDEEP

      1536:vdw+IkzrUErhvozUQzHpxZvbS3gTotapQAVwq86XiMPZw/a7KVrlee:vdwunv1oz1xRbSQToEp3w04aK0e

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Modifies Windows Firewall

MITRE ATT&CK Enterprise v15

Tasks