General

  • Target
    Payload.exe
  • Size 66KB
  • Sample261108-xscvfstsfw
  • SHA256 4bed72872ab23db943ce53f460d979ff750f9518124dfaaf8525dba0979f2604
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • njrat

Version
  • <- NjRAT 0.7d Horror Edition ->

Botnet
  • Victim

C2
  • alibabaawas9.ddns.net:4444

Mutex
  • 732a1e260e69d348c8a89911f261293d

Attributes
  • reg_key

    732a1e260e69d348c8a89911f261293d

  • splitter

    Y262SUCZ4UJJ

Targets

    • Target
      Payload.exe
    • Size 66KB
    • SHA256 4bed72872ab23db943ce53f460d979ff750f9518124dfaaf8525dba0979f2604
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: njRAT/Bladabindi

      Widely used RAT written in .NET.

MITRE ATT&CK Enterprise v16

Tasks