Overview

overview

10

Static

static

10

New Client.exe

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    New Client.exe

  • Size

    65KB

  • Sample

    241005-zqjlbssdqk

  • MD5

    73d3a7f8e88738107d9af5dce1d0aa01

  • SHA1

    4fc3adf92eb563101d218e67e65e66321a9609ad

  • SHA256

    962a9410609dda2ee32b704ba31d4cb4f70f14249cd8a183f5ebfaea63973c1d

  • SHA512

    12ed60a8cbd417e42297c14b5527c7eeb60b828a3124463b96e4d228c9b3ea96da11b836bde9478fcb65aadd1ba9cd743b038825aa24460ccd82fbc869a63612

  • SSDEEP

    1536:Aaawk8oN36tlQviFw10AglBnvA3fLteF3nLrB9z3n3aF9bJS9vM:Aaawk8oN36tlQviFCnUBnofWl9znaF9J

Score
10/10
njratdebiludiscoverytrojan

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

Debilu

C2

127.0.0.1:7999

Mutex

COM Surrogate

Attributes
  • reg_key

    COM Surrogate

  • splitter

    |Ghost|

Targets

    • Target

      New Client.exe

    • Size

      65KB

    • MD5

      73d3a7f8e88738107d9af5dce1d0aa01

    • SHA1

      4fc3adf92eb563101d218e67e65e66321a9609ad

    • SHA256

      962a9410609dda2ee32b704ba31d4cb4f70f14249cd8a183f5ebfaea63973c1d

    • SHA512

      12ed60a8cbd417e42297c14b5527c7eeb60b828a3124463b96e4d228c9b3ea96da11b836bde9478fcb65aadd1ba9cd743b038825aa24460ccd82fbc869a63612

    • SSDEEP

      1536:Aaawk8oN36tlQviFw10AglBnvA3fLteF3nLrB9z3n3aF9bJS9vM:Aaawk8oN36tlQviFCnUBnofWl9znaF9J

    Score
    10/10
    njratdebiludiscoverytrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Deletes itself

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks