8c73a72c81a9363aa3414c16843346676435985bf175cb545e95c7cfc6e7c0cf

Analysis

max time kernel
25s
platform
windows11-21h2_x64
resource
win11-20240611-en
resource tags

arch:x64arch:x86image:win11-20240611-enlocale:en-usos:windows11-21h2-x64system
submitted
26/06/2024, 14:32

Target
njRAT-main/NjRAT.0.7.Danger.Edition/NjRat 0.7D Danger Edition.exe
Size 10.2MB
Sample240626-rwe64aydpd
SHA256 a83b5e33d310c5b523c99faa06787de04345ee21eff5322ea0bf4f0c14cf0e57
MD5 06e0d1b7c4e6712f430b3a47f9f87f34
SHA1 68444764f28c2ce512aa80526bc25d270a94eb1d
SHA512 6a52347ea407059dfc8582177d84cc9517cc6c9d85a1ff62aab893b20ef2b7789be8852371a0fbc17fe14aac130f248ca98efc450f1ab76d5a34bc00eaac6471
SSDEEP 196608:0qwQxJFTigAmoAG4bPUw7YS/hGIdInB6YvqmepwKoKsACmc2ZcefZd+I7N548Z:di7U7/hhiB6QOEKTXc47UG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 224 wrote to memory of 844	224	NjRat 0.7D Danger Edition.exe	79
PID 224 wrote to memory of 844	224	NjRat 0.7D Danger Edition.exe	79
PID 844 wrote to memory of 2924	844	NjRat 0.7D Danger Edition.exe	82
PID 844 wrote to memory of 2924	844	NjRat 0.7D Danger Edition.exe	82

C:\Users\Admin\AppData\Local\Temp\njRAT-main\NjRAT.0.7.Danger.Edition\NjRat 0.7D Danger Edition.exe
"C:\Users\Admin\AppData\Local\Temp\njRAT-main\NjRAT.0.7.Danger.Edition\NjRat 0.7D Danger Edition.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:224
- C:\Users\Admin\AppData\Local\Temp\njRAT-main\NjRAT.0.7.Danger.Edition\NjRat 0.7D Danger Edition.exe
  "C:\Users\Admin\AppData\Local\Temp\njRAT-main\NjRAT.0.7.Danger.Edition\NjRat 0.7D Danger Edition.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:844
- - C:\Users\Admin\AppData\Local\Temp\njRAT-main\NjRAT.0.7.Danger.Edition\NjRat 0.7D Danger Edition.exe
    "C:\Users\Admin\AppData\Local\Temp\njRAT-main\NjRAT.0.7.Danger.Edition\NjRat 0.7D Danger Edition.exe"
    3⤵
    PID:2924

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact