General

  • Target
    260802-m7hn5s1fph_pw_infected.zip
  • Size 17KB
  • Sample260802-rap46sthqa
  • SHA256 22080da23f8a7e80c8a67bf14417f430bbffa34d99d85839839c19f468610a9d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • njrat

Version
  • im523

Botnet
  • SOFT

C2
  • 45.84.227.157:5012

Mutex
  • 0ec846a435bf91138081ad39491b85bb

Attributes
  • reg_key

    0ec846a435bf91138081ad39491b85bb

  • splitter

    |'|'|

Targets

    • Target
      stub.exe
    • Size 37KB
    • SHA256 02d38f82c46f5d68f975f4565f099bd8224271717f767a7445b4a857f461e00c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks