Overview

overview

10

Static

static

10

lets have sex.exe

windows7-x64

lets have sex.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    lets have sex.exe

  • Size

    55KB

  • Sample

    241213-r2x9vs1pbt

  • MD5

    49fe3af39f2e39b36d6519db50f05b5d

  • SHA1

    b96571c6056a6542e2e108565724ff6f8f719191

  • SHA256

    97d20ed5cc0e56db47810a100458ebc40a9c3ab4f330d3f2e6c46d3df95ee607

  • SHA512

    3a3b7385d53d237c0f1b0f313378fef57e06777bb93a426ba6496d74ffca1b2800b6af9d5f82806221dc4fe8bc9f95087208641770d88ba60e0dbf1d7ac5054b

  • SSDEEP

    1536:KeksDnHNwZ8Cam8LDdwsNMDbXExI3pmAm:usDn6SKiDdwsNMDbXExI3pm

Score
10/10
njratfucked by kev discoverytrojan

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

fucked by kev

C2

japanese-cross.gl.at.ply.gg:16828

Mutex

11f854de8c8a1529a4c6e63081a55988

Attributes
  • reg_key

    11f854de8c8a1529a4c6e63081a55988

  • splitter

    Y262SUCZ4UJJ

Targets

    • Target

      lets have sex.exe

    • Size

      55KB

    • MD5

      49fe3af39f2e39b36d6519db50f05b5d

    • SHA1

      b96571c6056a6542e2e108565724ff6f8f719191

    • SHA256

      97d20ed5cc0e56db47810a100458ebc40a9c3ab4f330d3f2e6c46d3df95ee607

    • SHA512

      3a3b7385d53d237c0f1b0f313378fef57e06777bb93a426ba6496d74ffca1b2800b6af9d5f82806221dc4fe8bc9f95087208641770d88ba60e0dbf1d7ac5054b

    • SSDEEP

      1536:KeksDnHNwZ8Cam8LDdwsNMDbXExI3pmAm:usDn6SKiDdwsNMDbXExI3pm

    Score
    10/10
    njratdiscoverytrojan

    • Njrat family

      njrat

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks