njrat | 22b4c7b7a020cddf746df1e5ede1216ca1aa47f2583225ae608129f7616f61fe | Triage

Sharing

General

Target

22b4c7b7a020cddf746df1e5ede1216ca1aa47f2583225ae608129f7616f61fe
Size

115KB
Sample

210908-k43tssebh3
MD5

acbe931c4d267f04d5b3fa1291b4417b
SHA1

e521b1253137f2d479ddab289dcbf34e471619f1
SHA256

22b4c7b7a020cddf746df1e5ede1216ca1aa47f2583225ae608129f7616f61fe
SHA512

ae8f85cc7631f9aa730b450a7ce5c30c846b2b02b96aa7627b466122ef1e93bcf6a602168d5a24a044da3c74ebf62eb999ee82833f4c80dc6320855d260ea464

Score

10^/10

njrat evasion persistence trojan

Malware Config

Targets

- Target
  
  22b4c7b7a020cddf746df1e5ede1216ca1aa47f2583225ae608129f7616f61fe
- Size
  
  115KB
- MD5
  
  acbe931c4d267f04d5b3fa1291b4417b
- SHA1
  
  e521b1253137f2d479ddab289dcbf34e471619f1
- SHA256
  
  22b4c7b7a020cddf746df1e5ede1216ca1aa47f2583225ae608129f7616f61fe
- SHA512
  
  ae8f85cc7631f9aa730b450a7ce5c30c846b2b02b96aa7627b466122ef1e93bcf6a602168d5a24a044da3c74ebf62eb999ee82833f4c80dc6320855d260ea464
Score

10^/10

njrat evasion persistence trojan
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

njratevasionpersistencetrojan

behavioral2

njratevasionpersistencetrojan