Overview

overview

10

Static

static

URLScan

urlscan

https://cdn.discorda...

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://cdn.discordapp.com/attachments/728960597013823539/813424056648728656/security.exe

  • Sample

    210223-m1evajv65j

Score
10/10
njratloaderevasionpersistencetrojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

loader

C2

95.154.199.64:8745

Mutex

f1b0f742c95226e5b3a9714caf040bd0

Attributes
  • reg_key

    f1b0f742c95226e5b3a9714caf040bd0

  • splitter

    Y262SUCZ4UJJ

Targets

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks