Overview

overview

10

Static

static

10

f94b4ab2c3...18.exe

windows7-x64

10

f94b4ab2c3...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f94b4ab2c33c3b472c278fd963e67805_JaffaCakes118

  • Size

    43KB

  • Sample

    240926-2sclxasbrk

  • MD5

    f94b4ab2c33c3b472c278fd963e67805

  • SHA1

    9684d295c9a6527e3134a04d08847d044bdd60b3

  • SHA256

    4be466909ca7f3a1384808e517894a07fbe6910ed4fba4f74f096d7bef59c2c4

  • SHA512

    868abe2bd7f1a73ba31bce408da22832bc99d691806d1de21cf3a45e59fb9e352ad40db585411fc49d0ea9399c2c1223a792b4f71ac1984828f35b2a5df0f3d1

  • SSDEEP

    384:iZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWn7mgra:Q99nU4pEqt5tKhohuuXQ/omC+L

Score
10/10
njrathackeddiscoverytrojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:1177

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      f94b4ab2c33c3b472c278fd963e67805_JaffaCakes118

    • Size

      43KB

    • MD5

      f94b4ab2c33c3b472c278fd963e67805

    • SHA1

      9684d295c9a6527e3134a04d08847d044bdd60b3

    • SHA256

      4be466909ca7f3a1384808e517894a07fbe6910ed4fba4f74f096d7bef59c2c4

    • SHA512

      868abe2bd7f1a73ba31bce408da22832bc99d691806d1de21cf3a45e59fb9e352ad40db585411fc49d0ea9399c2c1223a792b4f71ac1984828f35b2a5df0f3d1

    • SSDEEP

      384:iZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWn7mgra:Q99nU4pEqt5tKhohuuXQ/omC+L

    Score
    10/10
    njrathackeddiscoverytrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks