Overview

overview

10

Static

static

10

Payload.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Payload.exe

  • Size

    55KB

  • Sample

    241005-k22tqa1crf

  • MD5

    83d3815a9a3fbd273f95e70db0eac3f8

  • SHA1

    99383ff04d57c81da8c8245c415ffbfdc990cbef

  • SHA256

    245f92a296c733453396b5c93aa899a2a5000a92ad740ba5de9fad644aacfd00

  • SHA512

    fba31ee3d823175f73d6271360af6b8ba962ae6749ad6871bcc2f4bd55a76cd48af0c86e7065ec0dfaa99a2fa445723ca1fcd2fe1a20a0130c8256e220e46353

  • SSDEEP

    1536:PtLu8DnN8N1+S1Cl/BODqwsNMDpXExI3pm8m:s8DnNGcXODqwsNMDpXExI3pm

Score
10/10
njratvictimdiscoverytrojan

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

tlkkyhm.localto.net:7075

Mutex

7dbcb400c9c5b846927c1bd3f91a691d

Attributes
  • reg_key

    7dbcb400c9c5b846927c1bd3f91a691d

  • splitter

    Y262SUCZ4UJJ

Targets

    • Target

      Payload.exe

    • Size

      55KB

    • MD5

      83d3815a9a3fbd273f95e70db0eac3f8

    • SHA1

      99383ff04d57c81da8c8245c415ffbfdc990cbef

    • SHA256

      245f92a296c733453396b5c93aa899a2a5000a92ad740ba5de9fad644aacfd00

    • SHA512

      fba31ee3d823175f73d6271360af6b8ba962ae6749ad6871bcc2f4bd55a76cd48af0c86e7065ec0dfaa99a2fa445723ca1fcd2fe1a20a0130c8256e220e46353

    • SSDEEP

      1536:PtLu8DnN8N1+S1Cl/BODqwsNMDpXExI3pm8m:s8DnNGcXODqwsNMDpXExI3pm

    Score
    10/10
    njratdiscoverytrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks