General

  • Target

    ad43c66111cba44c1841ebc590a1dc4e525ab38d74433dd41c26b178f4b8c2e1

  • Size

    37KB

  • Sample

    241217-ccfk7axpem

  • MD5

    c656f530c130c90a375047f3f501ab03

  • SHA1

    4d3fb02a42eaab3b9e36a144148a1a9ee3ae5efa

  • SHA256

    ad43c66111cba44c1841ebc590a1dc4e525ab38d74433dd41c26b178f4b8c2e1

  • SHA512

    831000fd3f1ff365507243ceacae40b48d8d0d0dbb46b955a17f2eed8e29c8d30283e3904f3bff11593aa382dc3bfe2cdba5ab4265030ee212f7064ca1223ad6

  • SSDEEP

    384:5sh7qi0hJZtbH9KyM+2ZzmuHtgs2yHFrAF+rMRTyN/0L+EcoinblneHQM3epzXtV:yWJ95M+2Z6uKdylrM+rMRa8Nurft

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

tcp://kiwitech1337-20411.portmap.host:20411

Mutex

3e667850c59c9299d789f6e186e7293a

Attributes
  • reg_key

    3e667850c59c9299d789f6e186e7293a

  • splitter

    |'|'|

Targets

    • Target

      ad43c66111cba44c1841ebc590a1dc4e525ab38d74433dd41c26b178f4b8c2e1

    • Size

      37KB

    • MD5

      c656f530c130c90a375047f3f501ab03

    • SHA1

      4d3fb02a42eaab3b9e36a144148a1a9ee3ae5efa

    • SHA256

      ad43c66111cba44c1841ebc590a1dc4e525ab38d74433dd41c26b178f4b8c2e1

    • SHA512

      831000fd3f1ff365507243ceacae40b48d8d0d0dbb46b955a17f2eed8e29c8d30283e3904f3bff11593aa382dc3bfe2cdba5ab4265030ee212f7064ca1223ad6

    • SSDEEP

      384:5sh7qi0hJZtbH9KyM+2ZzmuHtgs2yHFrAF+rMRTyN/0L+EcoinblneHQM3epzXtV:yWJ95M+2Z6uKdylrM+rMRa8Nurft

MITRE ATT&CK Enterprise v15

Tasks