njrat | 449ce4867605f3e0314710eee5031b05ffc2c9b1cedc6214160b575a53de6812 | Triage

Sharing

General

Target

449ce4867605f3e0314710eee5031b05ffc2c9b1cedc6214160b575a53de6812
Size

327KB
Sample

240927-pfv69ssbrl
MD5

51b869db68994c50f63c8fbe4054a346
SHA1

627a1343536b5ac1e6d1fd5b06792e906eedded4
SHA256

449ce4867605f3e0314710eee5031b05ffc2c9b1cedc6214160b575a53de6812
SHA512

65e7a8b499d08ac00862ecb0ba4bc5bf94334026368c3eefb77142543a445a05b6351811a815e8913deabe45ddbe6c91c2b2da957d928b567f0c494cec2cd629
SSDEEP

6144:mdeqxwx+PiZZTZP2I0MKff5ch7M1soSGpjpt4nh+2j3hVa9gXmiQt3K:aX5czoSGPt4p3hVfXmiQt6

Score

10^/10

njrat nyan cat discovery trojan

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

seznam.hopto.org:5050

Mutex

a321f292c1b24fe7931

Attributes

reg_key
a321f292c1b24fe7931
splitter
@!#&^%$

Targets

- Target
  
  449ce4867605f3e0314710eee5031b05ffc2c9b1cedc6214160b575a53de6812
- Size
  
  327KB
- MD5
  
  51b869db68994c50f63c8fbe4054a346
- SHA1
  
  627a1343536b5ac1e6d1fd5b06792e906eedded4
- SHA256
  
  449ce4867605f3e0314710eee5031b05ffc2c9b1cedc6214160b575a53de6812
- SHA512
  
  65e7a8b499d08ac00862ecb0ba4bc5bf94334026368c3eefb77142543a445a05b6351811a815e8913deabe45ddbe6c91c2b2da957d928b567f0c494cec2cd629
- SSDEEP
  
  6144:mdeqxwx+PiZZTZP2I0MKff5ch7M1soSGpjpt4nh+2j3hVa9gXmiQt3K:aX5czoSGPt4p3hVfXmiQt6
Score

10^/10

njrat nyan cat discovery trojan
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratnyan catdiscoverytrojan

behavioral2

njratnyan catdiscoverytrojan