General

  • Target
    2a6250cfc092e796a5f4c89fc6ef1792dffcbeeafc1c6d4ffae7b58d77644b74.exe
  • Size 21KB
  • Sample261110-s96rmsvxew
  • SHA256 2a6250cfc092e796a5f4c89fc6ef1792dffcbeeafc1c6d4ffae7b58d77644b74
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • njrat

Version
  • 0.7d

Botnet
  • NYAN CAT

C2
  • brushfire-design.torontodirect.info:443

Mutex
  • asmfhho8acki

Attributes
  • reg_key

    asmfhho8acki

  • splitter

    |'|'|

Targets

    • Target
      2a6250cfc092e796a5f4c89fc6ef1792dffcbeeafc1c6d4ffae7b58d77644b74.exe
    • Size 21KB
    • SHA256 2a6250cfc092e796a5f4c89fc6ef1792dffcbeeafc1c6d4ffae7b58d77644b74
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: njRAT/Bladabindi

      Widely used RAT written in .NET.

MITRE ATT&CK Enterprise v16

Tasks