njrat | dcc82834d21fd38db347368fcc8ebba52d50f3832f5f6f5d368fa84b2faef030 | Triage

Sharing

General

Target

dcc82834d21fd38db347368fcc8ebba52d50f3832f5f6f5d368fa84b2faef030
Size

93KB
Sample

211219-r67n4ageb6
MD5

f24a3142eb29d55505a974bae1bfe95b
SHA1

c33ef49f46ef14edaec38e45c661f71f5ce03bbf
SHA256

dcc82834d21fd38db347368fcc8ebba52d50f3832f5f6f5d368fa84b2faef030
SHA512

56f079c8c888918eaa868f4e3972381b61d11a49e397960a8cec12318943b55d604b799a64a6c545a660cc0af0366ff0eb1f5a7591e254c57b0e3b75e6508f85

Score

10^/10

njrat hacked evasion

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

FRANSESCOTI3LjAuFRANSESCOC4x:NTU1Mg==

Mutex

9c9bd7a28c739c014113336435e1e076

Attributes

reg_key
9c9bd7a28c739c014113336435e1e076
splitter
|'|'|

Targets

- Target
  
  dcc82834d21fd38db347368fcc8ebba52d50f3832f5f6f5d368fa84b2faef030
- Size
  
  93KB
- MD5
  
  f24a3142eb29d55505a974bae1bfe95b
- SHA1
  
  c33ef49f46ef14edaec38e45c661f71f5ce03bbf
- SHA256
  
  dcc82834d21fd38db347368fcc8ebba52d50f3832f5f6f5d368fa84b2faef030
- SHA512
  
  56f079c8c888918eaa868f4e3972381b61d11a49e397960a8cec12318943b55d604b799a64a6c545a660cc0af0366ff0eb1f5a7591e254c57b0e3b75e6508f85
Score

8^/10

evasion
- Modifies Windows Firewall
  evasion
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1