Overview

overview

10

Static

static

3

SholirPrivate.exe

windows10-2004-x64

10

Resubmissions

19/09/2024, 18:42

240919-xctg9svbmq10

19/09/2024, 18:42

240919-xcnxsavbmm10

19/09/2024, 18:39

240919-xa54aatfkh10

19/09/2024, 18:38

240919-w92dpsthpr10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SholirPrivate.exe
  • Size 25KB
  • Sample240919-w92dpsthpr
  • SHA256 3ac6cecc2e601cb60c13478eba7e46bb29cb78da5e9801c7f38be8588e31ffc9
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
njrathackedtrojan

Malware Config

Extracted

Family

  • njrat

Version

  • Njrat 0.7 Golden By Hassan Amiri

Botnet

  • HacKed

C2

  • 127.0.0.1:5552

Attributes
  • splitter

    |Hassan|

Targets

    • Target
      SholirPrivate.exe
    • Size 25KB
    • SHA256 3ac6cecc2e601cb60c13478eba7e46bb29cb78da5e9801c7f38be8588e31ffc9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    njrathackedtrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks