njrat | 6ae713e81d6cd0d299e4e72c7b7db6b42ab8f4747b4f5872c8a31cd886542c11 | Triage

Sharing

General

Target

Setup.exe
Size

106KB
Sample

230607-fbd8hshd7s
MD5

ba60d147d28d05bf07a9d65d31544c90
SHA1

91edd1e21a2131bf24fc4c5603867fd991cceee4
SHA256

6ae713e81d6cd0d299e4e72c7b7db6b42ab8f4747b4f5872c8a31cd886542c11
SHA512

ac890722f1945af1068fbc5940f2d2ef34ff0bf81f37bba902e022d58c38ba2ab8ad4a47a612ff487285d93bf08de387ab66f162516c03bec83398cfc1b14592
SSDEEP

1536:V0S+NhCmuhYwvXFmvM/n0Q1vOyHP1aed/y4YMv:V02muhR8OlvAed/nY

Score

10^/10

njrat hacked evasion

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

FRANSESCOTI3LjAuFRANSESCOC4x:MjIyMg==

Mutex

451b09cd7b7cbe25eb87142148b405e7

Attributes

reg_key
451b09cd7b7cbe25eb87142148b405e7
splitter
|'|'|

Targets

- Target
  
  Setup.exe
- Size
  
  106KB
- MD5
  
  ba60d147d28d05bf07a9d65d31544c90
- SHA1
  
  91edd1e21a2131bf24fc4c5603867fd991cceee4
- SHA256
  
  6ae713e81d6cd0d299e4e72c7b7db6b42ab8f4747b4f5872c8a31cd886542c11
- SHA512
  
  ac890722f1945af1068fbc5940f2d2ef34ff0bf81f37bba902e022d58c38ba2ab8ad4a47a612ff487285d93bf08de387ab66f162516c03bec83398cfc1b14592
- SSDEEP
  
  1536:V0S+NhCmuhYwvXFmvM/n0Q1vOyHP1aed/y4YMv:V02muhR8OlvAed/nY
Score

8^/10

evasion
- Modifies Windows Firewall
  evasion
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1