Overview

overview

10

Static

static

10

2e6837e54f...8N.exe

windows7-x64

10

2e6837e54f...8N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e6837e54fbf29defdaab7e4bda1bac7b9e37924d6a5d085c06ebfa0dd7a2c18N

  • Size

    43KB

  • Sample

    241018-vjhy1azemp

  • MD5

    de986904d31b5d090f83d368243a1670

  • SHA1

    0c98168dc5c809e17b78c0766787f7fc36facf9f

  • SHA256

    2e6837e54fbf29defdaab7e4bda1bac7b9e37924d6a5d085c06ebfa0dd7a2c18

  • SHA512

    033250da200a5fecb2536db6bbd65033e59dc27e1472016b4cc65dda38e85658f7df8e8e5ce63072810bb1d5d5f783aef28586fa72856e969ab92f2dcc1b9b6a

  • SSDEEP

    384:FZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnWmgra:P99nU4pEqt5tKhohuuXQ/oLC+L

Score
10/10
njrathackeddiscoverytrojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:1192

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      2e6837e54fbf29defdaab7e4bda1bac7b9e37924d6a5d085c06ebfa0dd7a2c18N

    • Size

      43KB

    • MD5

      de986904d31b5d090f83d368243a1670

    • SHA1

      0c98168dc5c809e17b78c0766787f7fc36facf9f

    • SHA256

      2e6837e54fbf29defdaab7e4bda1bac7b9e37924d6a5d085c06ebfa0dd7a2c18

    • SHA512

      033250da200a5fecb2536db6bbd65033e59dc27e1472016b4cc65dda38e85658f7df8e8e5ce63072810bb1d5d5f783aef28586fa72856e969ab92f2dcc1b9b6a

    • SSDEEP

      384:FZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnWmgra:P99nU4pEqt5tKhohuuXQ/oLC+L

    Score
    10/10
    njrathackeddiscoverytrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks