Case study
Malware Analysis: njRAT and Casdet behavior investigation
A malware investigation examines njRAT and a UPX-packed Casdet executable with PEStudio static triage and ANY.RUN sandbox telemetry, alongside a malicious PDF and benign comparison files. The author reports process, registry and network behavior, extracted indicators and MITRE ATT&CK mappings in a report and screenshots.
- Targets
- Binary
- Category
- Independent reconstruction cases
- Relationship
- Independent reconstruction project
- Sources reviewed
Requirements & limits
- The investigation used PEStudio 9.56 and ANY.RUN on a Windows 10 guest.
- The author reports that Infected.exe crashed because libelf.dll was missing, so no sandbox behavior was observed for it.
About this entry
The description was reviewed against primary sources.
Primary sources
- README.md GitHub · phour44/Malware-Analysis · Revision c30cab3
More in Native binaries
All 250 entries in Native binariesNative binaries case studies (7)