General

  • Target
    bIA0.exe
  • Size 36KB
  • Sample230106-tk7s3shb52
  • SHA256 a197bb8b0d29a6b7c273c0474448ca4c5393e5cc4a178ffe1c50abe2da4bbb96
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • njrat

Version
  • 0.7d By Pjoao1578

Botnet
  • HacKed

C2
  • https://pastebin.com/raw/HEFUfAcq:5552

Mutex
  • 6a2634340fbf8a0a2c038c6263d49fd1

Attributes
  • reg_key

    6a2634340fbf8a0a2c038c6263d49fd1

  • splitter

    |'|'|

Targets

    • Target
      bIA0.exe
    • Size 36KB
    • SHA256 a197bb8b0d29a6b7c273c0474448ca4c5393e5cc4a178ffe1c50abe2da4bbb96
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Deletes itself

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks