njrat | 1729c5b2ca53abe5d0e67535766860ebba91dc23b8575ac5b6fc8ca33167de14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1729c5b2ca53abe5d0e67535766860ebba91dc23b8575ac5b6fc8ca33167de14.exe
Size

93KB
Sample

240822-k9b82ayeph
MD5

1b4192a3f7d586fbe102ff76e5f6c760
SHA1

a5d4e3292e5072152764ac603fbb8411fed810eb
SHA256

1729c5b2ca53abe5d0e67535766860ebba91dc23b8575ac5b6fc8ca33167de14
SHA512

89d437dd7e51701d1107ec381ee6f89238459580596800e92291da6d7bd8caf1f6431c53d31968696035a479e7814d8171ee4c3ca8834854afed914ec3fdf593
SSDEEP

1536:dU/r7EkrjaFIs7E5Ox8Jn8LjEwzGi1dDyD4gS:dU7jau5OKVni1d0h

Score

10^/10

njrat hacked discovery evasion persistence privilege_escalation

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

144.202.69.96:22021

Mutex

0a454ceb29e4709267ac1207a45d0b0d

Attributes

reg_key
0a454ceb29e4709267ac1207a45d0b0d
splitter
|'|'|

Targets

- Target
  
  1729c5b2ca53abe5d0e67535766860ebba91dc23b8575ac5b6fc8ca33167de14.exe
- Size
  
  93KB
- MD5
  
  1b4192a3f7d586fbe102ff76e5f6c760
- SHA1
  
  a5d4e3292e5072152764ac603fbb8411fed810eb
- SHA256
  
  1729c5b2ca53abe5d0e67535766860ebba91dc23b8575ac5b6fc8ca33167de14
- SHA512
  
  89d437dd7e51701d1107ec381ee6f89238459580596800e92291da6d7bd8caf1f6431c53d31968696035a479e7814d8171ee4c3ca8834854afed914ec3fdf593
- SSDEEP
  
  1536:dU/r7EkrjaFIs7E5Ox8Jn8LjEwzGi1dDyD4gS:dU7jau5OKVni1d0h
Score

8^/10

discovery evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation

behavioral2

discoveryevasionpersistenceprivilege_escalation