njrat | 8ac23a3fc70451ed209a74c754fef8d813741d16e62581379764bdc35a9938f8 | Triage

Sharing

General

Target

8ac23a3fc70451ed209a74c754fef8d813741d16e62581379764bdc35a9938f8
Size

337KB
Sample

240831-3tw8dasfnc
MD5

223e27a19d124388c571f62ab389dd1f
SHA1

debe0ff284d631924d750c7b0d71324e2116bba9
SHA256

8ac23a3fc70451ed209a74c754fef8d813741d16e62581379764bdc35a9938f8
SHA512

6cabd32570bb27b6ff09bc6b87d232aacfad5ace126d8ef2fb749134ed87234394a829d147a8534f362d494c4c056280a81f84629b0abded19c3d776c051aecf
SSDEEP

3072:4K/ghVgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:4K/ghV1+fIyG5jZkCwi8r

Score

10^/10

njrat discovery persistence trojan

Malware Config

Targets

- Target
  
  8ac23a3fc70451ed209a74c754fef8d813741d16e62581379764bdc35a9938f8
- Size
  
  337KB
- MD5
  
  223e27a19d124388c571f62ab389dd1f
- SHA1
  
  debe0ff284d631924d750c7b0d71324e2116bba9
- SHA256
  
  8ac23a3fc70451ed209a74c754fef8d813741d16e62581379764bdc35a9938f8
- SHA512
  
  6cabd32570bb27b6ff09bc6b87d232aacfad5ace126d8ef2fb749134ed87234394a829d147a8534f362d494c4c056280a81f84629b0abded19c3d776c051aecf
- SSDEEP
  
  3072:4K/ghVgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:4K/ghV1+fIyG5jZkCwi8r
Score

10^/10

njrat discovery persistence trojan
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratdiscoverypersistencetrojan

behavioral2

njratdiscoverypersistencetrojan