General

  • Target
    Payloa22d.exe
  • Size 55KB
  • Sample260829-l2jtkshj5t
  • SHA256 79df259799987c6dcb4a262fe789a2ad14b9d6add6ddf471de02370e6df50d2e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • njrat

Version
  • <- NjRAT 0.7d Horror Edition ->

Botnet
  • Victim

C2
  • 6.tcp.cpolar.cn:11876

Mutex
  • 16d8815a29d8ef87d85f97debecc95c6

Attributes
  • reg_key

    16d8815a29d8ef87d85f97debecc95c6

  • splitter

    Y262SUCZ4UJJ

Targets

    • Target
      Payloa22d.exe
    • Size 55KB
    • SHA256 79df259799987c6dcb4a262fe789a2ad14b9d6add6ddf471de02370e6df50d2e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Family: njRAT/Bladabindi

      Widely used RAT written in .NET.

MITRE ATT&CK Enterprise v16

Tasks