njrat | a8aebc912aab18fba2badddbafdd1538f935a4ed922382ba27d9abf23af9ae05 | Triage

Sharing

General

Target

a8aebc912aab18fba2badddbafdd1538f935a4ed922382ba27d9abf23af9ae05.exe
Size

1.2MB
Sample

241124-hrwhvavnfl
MD5

0d8ed451749375ea5e990c20b9e23edd
SHA1

ce025d936bef17412f13213194bd2277a1f22ee4
SHA256

a8aebc912aab18fba2badddbafdd1538f935a4ed922382ba27d9abf23af9ae05
SHA512

5380e0ece5bc19b29d7d6d1ecf2698540fc6661b955799f2f910b2e852a830ac3e7d7aff841345f4a901996abc6cdf1d4c8148fe5fb33a9b41e4f537e2c705e3
SSDEEP

24576:WPek78oKgJRrLFbjPjy9WWmbY88TFCbJ4i80a:WPX8oz7PFnP0X81SEa

Score

10^/10

njrat nyan cat discovery trojan

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

milla.publicvm.com:5050

Mutex

ae5c312ad13e4985

Attributes

reg_key
ae5c312ad13e4985
splitter
@!#&^%$

Targets

- Target
  
  a8aebc912aab18fba2badddbafdd1538f935a4ed922382ba27d9abf23af9ae05.exe
- Size
  
  1.2MB
- MD5
  
  0d8ed451749375ea5e990c20b9e23edd
- SHA1
  
  ce025d936bef17412f13213194bd2277a1f22ee4
- SHA256
  
  a8aebc912aab18fba2badddbafdd1538f935a4ed922382ba27d9abf23af9ae05
- SHA512
  
  5380e0ece5bc19b29d7d6d1ecf2698540fc6661b955799f2f910b2e852a830ac3e7d7aff841345f4a901996abc6cdf1d4c8148fe5fb33a9b41e4f537e2c705e3
- SSDEEP
  
  24576:WPek78oKgJRrLFbjPjy9WWmbY88TFCbJ4i80a:WPX8oz7PFnP0X81SEa
Score

10^/10

njrat nyan cat discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratnyan catdiscoverytrojan

behavioral2

njratnyan catdiscoverytrojan