njrat | 87a1a69ed3412dc1e4614934578f264ae3d8dc03c6fe661665757aa29bc46904 | Triage

Sharing

General

Target

87a1a69ed3412dc1e4614934578f264ae3d8dc03c6fe661665757aa29bc46904_NeikiAnalytics.exe
Size

27KB
Sample

240629-jzfysstemg
MD5

9011845689313572bbd3b3ebe98d88f0
SHA1

2a0eea8d00affc7f90968761231fd0df7c41a573
SHA256

87a1a69ed3412dc1e4614934578f264ae3d8dc03c6fe661665757aa29bc46904
SHA512

5c71ef3f694bde7e1feab7fe924e619275b57a1548229736e4ef53cb9a83657b5aa392e8f8fc20d07381ed0a73e9d854223b667f9d367c3a54d32efb1cd670c4
SSDEEP

384:ELPe4c0CyzDGoEXHifpY8eu+uCQP8thFMRAQk93vmhm7UMKmIEecKdbXTzm9bVhD:SPtc0CayIfveuJRA/vMHTi9bD

Score

10^/10

njrat hacked

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

HacKed

C2

20.ip.gl.ply.gg:8989

Mutex

Windows

Attributes

reg_key
Windows
splitter
|-F-|

Targets

- Target
  
  87a1a69ed3412dc1e4614934578f264ae3d8dc03c6fe661665757aa29bc46904_NeikiAnalytics.exe
- Size
  
  27KB
- MD5
  
  9011845689313572bbd3b3ebe98d88f0
- SHA1
  
  2a0eea8d00affc7f90968761231fd0df7c41a573
- SHA256
  
  87a1a69ed3412dc1e4614934578f264ae3d8dc03c6fe661665757aa29bc46904
- SHA512
  
  5c71ef3f694bde7e1feab7fe924e619275b57a1548229736e4ef53cb9a83657b5aa392e8f8fc20d07381ed0a73e9d854223b667f9d367c3a54d32efb1cd670c4
- SSDEEP
  
  384:ELPe4c0CyzDGoEXHifpY8eu+uCQP8thFMRAQk93vmhm7UMKmIEecKdbXTzm9bVhD:SPtc0CayIfveuJRA/vMHTi9bD
Score

7^/10
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2