Overview

overview

10

Static

static

10

SpyNote 7....ce.rar

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SpyNote 7.0 Source.rar

  • Size

    20.1MB

  • Sample

    250406-vm2khswq12

  • MD5

    c993a305e345d36d517b5656da063ee3

  • SHA1

    dc144f942f47b8979fb95180f2cda7619c43d658

  • SHA256

    18d0aa5bf3ac5998721d4a8c83ff7054086342e7f65efbfd1877ed796e9e680b

  • SHA512

    480aa10ad55c0a2a0d9123fae5b024c7ec7ba834f3ae34c46d82119528abb1d44905c343fcc2e709b2647c3b54a6d8325c26fa0bfd54984f4ca1a110d5ee6d52

  • SSDEEP

    393216:NaGWW+D1xktWigWdlx7JcS1GQhINoTRbP4wUBNz6PTBZ+xd0Vt+j:hW7Djk/ldlhKS1GWINqRb2BoTT+xd0Vo

Score
10/10
njratspynotehackeddiscoverytrojan

Malware Config

Extracted

Family

spynote

C2

[SPY_NOTE_HOST_OK]:[SPY_NOTE_PORT_OK]

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

94.103.183.164:443

Mutex

b08f451bd093ab7013ef36cb3b4091ac

Attributes
  • reg_key

    b08f451bd093ab7013ef36cb3b4091ac

  • splitter

    MAXO

Targets

    • Target

      SpyNote 7.0 Source.rar

    • Size

      20.1MB

    • MD5

      c993a305e345d36d517b5656da063ee3

    • SHA1

      dc144f942f47b8979fb95180f2cda7619c43d658

    • SHA256

      18d0aa5bf3ac5998721d4a8c83ff7054086342e7f65efbfd1877ed796e9e680b

    • SHA512

      480aa10ad55c0a2a0d9123fae5b024c7ec7ba834f3ae34c46d82119528abb1d44905c343fcc2e709b2647c3b54a6d8325c26fa0bfd54984f4ca1a110d5ee6d52

    • SSDEEP

      393216:NaGWW+D1xktWigWdlx7JcS1GQhINoTRbP4wUBNz6PTBZ+xd0Vt+j:hW7Djk/ldlhKS1GWINqRb2BoTT+xd0Vo

    Score
    10/10
    njrathackeddiscoverytrojan

    • Njrat family

      njrat

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks