njrat | 94a8b79bc344f3522b5fa6f15d0dbb5e886b80b15d1b8008495ccd857d4e1f3e | Triage

Sharing

General

Target

9b122129429710ee6182b41434ab0a70N.exe
Size

241KB
Sample

240822-ld2pgssdlj
MD5

9b122129429710ee6182b41434ab0a70
SHA1

dd959df7e840b6901c87f117b0fea62d00388635
SHA256

94a8b79bc344f3522b5fa6f15d0dbb5e886b80b15d1b8008495ccd857d4e1f3e
SHA512

9218ebe2e1f48ee2d0c0b35c55ed59bfc7f5f8ef0f0041f29f9a36bc4947e6e35cc8b8640d0eb26302b07487cf40bbc62e77fe8937473016eff64a1a48b0600b
SSDEEP

3072:vJ+uIoN36tcQviFCZsBn7fWl9zdaF9bfYvMFXEqukVg9MDBfU3hJt:v2j9z5vMFXEgOMDBc3h

Score

10^/10

njrat hacked discovery

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

HacKed

C2

127.0.0.1:25565

Mutex

Client.exe

Attributes

reg_key
Client.exe
splitter
|Ghost|

Targets

- Target
  
  9b122129429710ee6182b41434ab0a70N.exe
- Size
  
  241KB
- MD5
  
  9b122129429710ee6182b41434ab0a70
- SHA1
  
  dd959df7e840b6901c87f117b0fea62d00388635
- SHA256
  
  94a8b79bc344f3522b5fa6f15d0dbb5e886b80b15d1b8008495ccd857d4e1f3e
- SHA512
  
  9218ebe2e1f48ee2d0c0b35c55ed59bfc7f5f8ef0f0041f29f9a36bc4947e6e35cc8b8640d0eb26302b07487cf40bbc62e77fe8937473016eff64a1a48b0600b
- SSDEEP
  
  3072:vJ+uIoN36tcQviFCZsBn7fWl9zdaF9bfYvMFXEqukVg9MDBfU3hJt:v2j9z5vMFXEgOMDBc3h
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2