njrat | bbc18ae3d745e58b7cfbabe732c05f2a7a2da8e358868f75bcb169b2bc98f6d2 | Triage

Sharing

General

Target

bbc18ae3d745e58b7cfbabe732c05f2a7a2da8e358868f75bcb169b2bc98f6d2N.exe
Size

23KB
Sample

250108-nz6axaymfy
MD5

a18c0497b8c1f3b6d0db984815a21c00
SHA1

685cc6c870888b263559bf5e18953098ddcb2f0e
SHA256

bbc18ae3d745e58b7cfbabe732c05f2a7a2da8e358868f75bcb169b2bc98f6d2
SHA512

e437cf53b9a2c41fda41415a9e0887ed14eaffd256e0e904a1f84ae10545e2727f13accd437540e51a5dabef739d92130e14c45f44e36bc890626cd5d21e24fc
SSDEEP

384:ec6CqbFYh3odrVCGiHssDB4b6i6fgpEupNXRmRvR6JZlbw8hqIusZzZMV0:xIU0tw3Rpcnuc

Score

10^/10

njrat alialitaly

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

ALIALITALY

C2

SkypeTcp.no-ip.biz:95

Mutex

a8222704e50eaec7b16bac0b7b54fc4b

Attributes

reg_key
a8222704e50eaec7b16bac0b7b54fc4b
splitter
|'|'|

Targets

- Target
  
  bbc18ae3d745e58b7cfbabe732c05f2a7a2da8e358868f75bcb169b2bc98f6d2N.exe
- Size
  
  23KB
- MD5
  
  a18c0497b8c1f3b6d0db984815a21c00
- SHA1
  
  685cc6c870888b263559bf5e18953098ddcb2f0e
- SHA256
  
  bbc18ae3d745e58b7cfbabe732c05f2a7a2da8e358868f75bcb169b2bc98f6d2
- SHA512
  
  e437cf53b9a2c41fda41415a9e0887ed14eaffd256e0e904a1f84ae10545e2727f13accd437540e51a5dabef739d92130e14c45f44e36bc890626cd5d21e24fc
- SSDEEP
  
  384:ec6CqbFYh3odrVCGiHssDB4b6i6fgpEupNXRmRvR6JZlbw8hqIusZzZMV0:xIU0tw3Rpcnuc
Score

1^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

alialitalynjrat

behavioral1

behavioral2