General

  • Target
    mjnoon.exe
  • Size 55KB
  • Sample261001-29qvvscf93
  • SHA256 655dd7d6de5c21211bd3b77ef4f1452f8ec2c83810b2a7081e9dde324cdeae3d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • njrat

Version
  • <- NjRAT 0.7d Horror Edition ->

Botnet
  • Victim

C2
  • 24.tcp.cpolar.top:444

Mutex
  • f602a1b7bbb5e732202a455c30203525

Attributes
  • reg_key

    f602a1b7bbb5e732202a455c30203525

  • splitter

    Y262SUCZ4UJJ

Targets

    • Target
      mjnoon.exe
    • Size 55KB
    • SHA256 655dd7d6de5c21211bd3b77ef4f1452f8ec2c83810b2a7081e9dde324cdeae3d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks