General

  • Target

    nJrat.exe

  • Size

    33KB

  • Sample

    241110-jktakssfjk

  • MD5

    9ad8bb137f921a286d36e30c1d23d208

  • SHA1

    a42fd2f68ffe8bc9b74ffae4b3a860f2ad84feba

  • SHA256

    3f0fea74bd93e7e438d8047a44cae4cca888b4495d46675edcbef5db4f1f520b

  • SHA512

    4e15a33e3817b433d1991d26f5d5bf70460aebde05678efe23e78d5d37173dcf85957c5797e9fd23d34ea113113d62b61feafe30374c9bab2ea9b94da5d48d68

  • SSDEEP

    768:VvTQspjbMaYvF9xdRdDqaws0RFfvJebgXrSw5G:tQs6vFDdXV0vfvJYQrSL

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |'|'|

Targets

    • Target

      nJrat.exe

    • Size

      33KB

    • MD5

      9ad8bb137f921a286d36e30c1d23d208

    • SHA1

      a42fd2f68ffe8bc9b74ffae4b3a860f2ad84feba

    • SHA256

      3f0fea74bd93e7e438d8047a44cae4cca888b4495d46675edcbef5db4f1f520b

    • SHA512

      4e15a33e3817b433d1991d26f5d5bf70460aebde05678efe23e78d5d37173dcf85957c5797e9fd23d34ea113113d62b61feafe30374c9bab2ea9b94da5d48d68

    • SSDEEP

      768:VvTQspjbMaYvF9xdRdDqaws0RFfvJebgXrSw5G:tQs6vFDdXV0vfvJYQrSL

MITRE ATT&CK Enterprise v15

Tasks