General

  • Target
    2026-08-10_2b732c4649fc768efa2a6de36cbc15ed_akira_rusty-stealer
  • Size 205KB
  • Sample260811-abvmls1gnf
  • SHA256 febbf309f863a49b1b8d38211ede3a116f5b8c8d262193031576b0acc680ee2f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • njrat

Version
  • im523

Botnet
  • SOFT

C2
  • 45.84.227.157:5012

Mutex
  • 0ec846a435bf91138081ad39491b85bb

Attributes
  • reg_key

    0ec846a435bf91138081ad39491b85bb

  • splitter

    |'|'|

Targets

    • Target
      2026-08-10_2b732c4649fc768efa2a6de36cbc15ed_akira_rusty-stealer
    • Size 205KB
    • SHA256 febbf309f863a49b1b8d38211ede3a116f5b8c8d262193031576b0acc680ee2f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Family: njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks