njrat | hxxps://gofile[.]io/d/Dud86E | Triage

Submit
Reports

Overview

overview

Static

static

URLScan

urlscan

https://gofile.io/d/...

windows10_x64

Resubmissions

11-01-2022 20:22

220111-y5q4aahba6 8

11-01-2022 16:43

220111-t8mstagegj 1

10-12-2021 09:11

211210-k5llxagaa4 10

Sharing

General

Target

https://gofile.io/d/Dud86E
Sample

211210-k5llxagaa4

Score

10^/10

njrat evasion persistence trojan

Static task

static1

URLScan task

urlscan1

Sample

https://gofile.io/d/Dud86E

Behavioral task

behavioral1

Sample

https://gofile.io/d/Dud86E

Resource

win10-en-20211208

njrat evasion persistence trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  https://gofile.io/d/Dud86E
Score

10^/10

njrat evasion persistence trojan
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Executes dropped EXE
- Modifies Windows Firewall
  evasion
- Drops startup file
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

njratevasionpersistencetrojan

© 2018-2024

Terms | Privacy