Overview

overview

10

Static

static

3

mw3.exe

windows10-2004-x64

10

mw3.exe

windows11-ltsc_2024-x64

10

Resubmissions

14/11/2026, 15:10

261114-sj7k9a1w9r

14/11/2026, 15:08

261114-sh9dfsey7n10

14/11/2026, 12:57

261114-p6934sg13y10

Sharing

Copy URL Twitter E-mail

General

  • Target
    mw3.exe
  • Size 3.9MB
  • Sample261114-p6934sg13y
  • SHA256 49473860d7b344cb0f36a54b26e70018b6a88ff37af0789f2f4fa637ac743201
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
njratevildefense_evasiondiscoveryexecutiontrojan

Malware Config

Extracted

Family

  • njrat

Version

  • <- NjRAT 0.7d Horror Edition ->

Botnet

  • EVIL

C2

  • 8.tcp.cpolar.cn:10327

Mutex

  • 392e7e842487e9fbcef42eee16347dfc

Attributes
  • reg_key

    392e7e842487e9fbcef42eee16347dfc

  • splitter

    Y262SUCZ4UJJ

Targets

    • Target
      mw3.exe
    • Size 3.9MB
    • SHA256 49473860d7b344cb0f36a54b26e70018b6a88ff37af0789f2f4fa637ac743201
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    evildefense_evasiondiscoveryexecutionnjrattrojan

    • Family: njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks