Overview

overview

10

Static

static

3

d942da836a...4a.exe

windows7-x64

10

d942da836a...4a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d942da836a814ed7cdc398c5df73ccca81cb43c19be10a459d786d584d83104a

  • Size

    138KB

  • Sample

    241022-d7dwhsvdkh

  • MD5

    4fb1ac905ae5c8aea4b23706f4474c4d

  • SHA1

    0717512f51a144b121bdcfa17575bb3cf2937a77

  • SHA256

    d942da836a814ed7cdc398c5df73ccca81cb43c19be10a459d786d584d83104a

  • SHA512

    7872bd9d9f18f34cdb8f72c41ca061ec405ab0bad745409be9af4592c93e1aacee8622fe7d1040283b5903cc8cb4493324f95bb16f0dc3a940bf82695a7ac23a

  • SSDEEP

    3072:aMtdiO7525FVOxtEUxQ9E2Ue9qokTTp/7HgveVVe9C18:liUIJOINHUe9qoerVVe9C

Score
10/10
njrathackedtrojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

127.0.0.1:50

Mutex

e99e462d99ad204bdf7d672852a4e30a

Attributes
  • reg_key

    e99e462d99ad204bdf7d672852a4e30a

  • splitter

    |'|'|

Targets

    • Target

      d942da836a814ed7cdc398c5df73ccca81cb43c19be10a459d786d584d83104a

    • Size

      138KB

    • MD5

      4fb1ac905ae5c8aea4b23706f4474c4d

    • SHA1

      0717512f51a144b121bdcfa17575bb3cf2937a77

    • SHA256

      d942da836a814ed7cdc398c5df73ccca81cb43c19be10a459d786d584d83104a

    • SHA512

      7872bd9d9f18f34cdb8f72c41ca061ec405ab0bad745409be9af4592c93e1aacee8622fe7d1040283b5903cc8cb4493324f95bb16f0dc3a940bf82695a7ac23a

    • SSDEEP

      3072:aMtdiO7525FVOxtEUxQ9E2Ue9qokTTp/7HgveVVe9C18:liUIJOINHUe9qoerVVe9C

    Score
    10/10
    njrathackedtrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks