Overview
overview
3Static
static
3njRAT v0.7...am.dll
windows7-x64
1njRAT v0.7...am.dll
windows10-2004-x64
1njRAT v0.7...ch.dll
windows7-x64
1njRAT v0.7...ch.dll
windows10-2004-x64
1njRAT v0.7...ic.dll
windows7-x64
1njRAT v0.7...ic.dll
windows10-2004-x64
1njRAT v0.7...lg.dll
windows7-x64
1njRAT v0.7...lg.dll
windows10-2004-x64
1njRAT v0.7...pw.dll
windows7-x64
1njRAT v0.7...pw.dll
windows10-2004-x64
1njRAT v0.7...c2.dll
windows7-x64
1njRAT v0.7...c2.dll
windows10-2004-x64
1njRAT v0.7...et.dll
windows7-x64
1njRAT v0.7...et.dll
windows10-2004-x64
1njRAT v0.7...7d.exe
windows7-x64
1njRAT v0.7...7d.exe
windows10-2004-x64
1njRAT v0.7d/stub.ps1
windows7-x64
1njRAT v0.7d/stub.ps1
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
njRAT v0.7d/Plugin/cam.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
njRAT v0.7d/Plugin/cam.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
njRAT v0.7d/Plugin/ch.dll
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
njRAT v0.7d/Plugin/ch.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
njRAT v0.7d/Plugin/mic.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
njRAT v0.7d/Plugin/mic.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
njRAT v0.7d/Plugin/plg.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
njRAT v0.7d/Plugin/plg.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
njRAT v0.7d/Plugin/pw.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
njRAT v0.7d/Plugin/pw.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
njRAT v0.7d/Plugin/sc2.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
njRAT v0.7d/Plugin/sc2.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
njRAT v0.7d/WinMM.Net.dll
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
njRAT v0.7d/WinMM.Net.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
njRAT v0.7d/njRAT v0.7d.exe
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
njRAT v0.7d/njRAT v0.7d.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
njRAT v0.7d/stub.ps1
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
njRAT v0.7d/stub.ps1
Resource
win10v2004-20240226-en
General
-
Target
df5f603558eec9f026564627aa560b21ced27660c00d1f642ad0cf3e84fdabcb
-
Size
952KB
-
MD5
e5884bf6edc2d669a6911efff9bf88a3
-
SHA1
674976560bac8e9772f4ced10e88fdeafe3f750b
-
SHA256
df5f603558eec9f026564627aa560b21ced27660c00d1f642ad0cf3e84fdabcb
-
SHA512
29bad8b8bfbed4614d3b0b83a32fcf58a7442481e5426f8ad2cebd67f821864b0a64615170be928b4bcb2f2e801cad45742096d08e33258b6aa24eb2ac2c0ffb
-
SSDEEP
24576:Jmnw5jwujuN264fygCzmMMU9DOBluSzAhkwK+I2hFsptzj0pSmY:4S3V64f7CSMMUcBM9hhkOSptEc
Malware Config
Signatures
-
Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
resource unpack001/njRAT v0.7d/Plugin/cam.dll unpack001/njRAT v0.7d/Plugin/ch.dll unpack001/njRAT v0.7d/Plugin/mic.dll unpack001/njRAT v0.7d/Plugin/plg.dll unpack001/njRAT v0.7d/Plugin/pw.dll unpack001/njRAT v0.7d/Plugin/sc2.dll unpack001/njRAT v0.7d/WinMM.Net.dll unpack001/njRAT v0.7d/njRAT v0.7d.exe
Files
-
df5f603558eec9f026564627aa560b21ced27660c00d1f642ad0cf3e84fdabcb.7z
Password: infected
-
njRAT v0.7d/GeoIP.dat
-
njRAT v0.7d/Plugin/cam.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT v0.7d/Plugin/ch.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT v0.7d/Plugin/mic.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT v0.7d/Plugin/plg.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT v0.7d/Plugin/pw.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT v0.7d/Plugin/sc2.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT v0.7d/Stub.manifest.xml
-
njRAT v0.7d/WinMM.Net.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
njRAT v0.7d/njRAT v0.7d.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
njRAT v0.7d/stub.il.ps1