General

  • Target
    clomsy 0.9.exe
  • Size 72KB
  • Sample260920-nex4sswele
  • SHA256 6681109d776e3d8b50d3941f3069e37975e333f8ccc20589c53a47c3e9ee86c8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • njrat

Version
  • <- NjRAT 0.7d Horror Edition ->

Botnet
  • server

C2
  • 30.tcp.cpolar.top:11779

Mutex
  • d7d773ad8a31e909d4e31b0f7aae56b2

Attributes
  • reg_key

    d7d773ad8a31e909d4e31b0f7aae56b2

  • splitter

    Y262SUCZ4UJJ

Targets

    • Target
      clomsy 0.9.exe
    • Size 72KB
    • SHA256 6681109d776e3d8b50d3941f3069e37975e333f8ccc20589c53a47c3e9ee86c8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: njRAT/Bladabindi

      Widely used RAT written in .NET.

MITRE ATT&CK Enterprise v16

Tasks