njrat | b759f0aafb6514247634e21bfe6e8784fe5933172e1528735c068edc1cf62fab | Triage

Resubmissions

06-06-2023 18:00

230606-wla7lsfd9w 10

06-06-2023 17:59

230606-wkvvmafd9s 10

Sharing

General

Target

detectable gui by JO1TAR0.exe
Size

43KB
Sample

230606-wkvvmafd9s
MD5

57cdd22688c43ddc013f9fcd6f99229a
SHA1

b401750b8761ff693509be4121f8a81a489c65d6
SHA256

b759f0aafb6514247634e21bfe6e8784fe5933172e1528735c068edc1cf62fab
SHA512

5282ae3b34af16ea7951edaa1635cc8eb38252551d0b10fe61a27327f41e434fa56d0726b5c6d0b133dca6aec4ec7f0ba92e299a5b756253f69b4eec930e5b98
SSDEEP

384:F8ZyoQF3VarE8yTTTfqtiWqEnkDai0+TzEIij+ZsNO3PlpJKkkjh/TzF7pWna/gm:F6zi3MY5TffqtpSDluXQ/ob3+L

Score

10^/10

njrat hacked

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

5.tcp.eu.ngrok.io:12308

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  detectable gui by JO1TAR0.exe
- Size
  
  43KB
- MD5
  
  57cdd22688c43ddc013f9fcd6f99229a
- SHA1
  
  b401750b8761ff693509be4121f8a81a489c65d6
- SHA256
  
  b759f0aafb6514247634e21bfe6e8784fe5933172e1528735c068edc1cf62fab
- SHA512
  
  5282ae3b34af16ea7951edaa1635cc8eb38252551d0b10fe61a27327f41e434fa56d0726b5c6d0b133dca6aec4ec7f0ba92e299a5b756253f69b4eec930e5b98
- SSDEEP
  
  384:F8ZyoQF3VarE8yTTTfqtiWqEnkDai0+TzEIij+ZsNO3PlpJKkkjh/TzF7pWna/gm:F6zi3MY5TffqtpSDluXQ/ob3+L
Score

1^/10
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1