njrat | 3c196e42e8c8c66394ac3f4569a3b1f1b1e956cf010e849feed22c50eb751796 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 15:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

799eef61f35415f47a0b4fbd3df98e68.exe
Size

270KB
MD5

799eef61f35415f47a0b4fbd3df98e68
SHA1

16975261fbb5f521f51881234520a572ef7ae987
SHA256

3c196e42e8c8c66394ac3f4569a3b1f1b1e956cf010e849feed22c50eb751796
SHA512

25d4d22bd27f49b4de79fdfc3d7abab84bf21a9ad3ae1212113e22bcefd288387a2722a57e2fc79239264139184387a7046cb440c0a090cbb2b3195a486ff7c4
SSDEEP

6144:DRBLNabZ8hYCoBN2IWKTEEy1uQE+1dCrQgOu:NRNabzOgTDCLCr/l

Score

10^/10

njrat trojan

Malware Config

Signatures

njRAT/Bladabindi
Widely used RAT written in .NET.
trojan njrat
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\799eef61f35415f47a0b4fbd3df98e68.exe
"C:\Users\Admin\AppData\Local\Temp\799eef61f35415f47a0b4fbd3df98e68.exe"
1⤵
PID:2908

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2908-0-0x0000000001080000-0x00000000010CA000-memory.dmp

Filesize
296KB

Download
memory/2908-1-0x0000000073F90000-0x000000007467E000-memory.dmp

Filesize
6.9MB

Download
memory/2908-2-0x0000000000690000-0x00000000006D0000-memory.dmp

Filesize
256KB

Download
memory/2908-3-0x0000000000610000-0x000000000061C000-memory.dmp

Filesize
48KB

Download
memory/2908-4-0x0000000073F90000-0x000000007467E000-memory.dmp

Filesize
6.9MB

Download
memory/2908-5-0x0000000000690000-0x00000000006D0000-memory.dmp

Filesize
256KB

Download