njrat | c3bc66ce2854cb0d876064d9db6f914954b627183d7707c10b6c704fe8bc0d0a | Triage

Sharing

General

Target

e051d24f412df43ff14a7e7b268dfdc1_JaffaCakes118
Size

69KB
Sample

240914-q6xcpaxepg
MD5

e051d24f412df43ff14a7e7b268dfdc1
SHA1

4ce635c9ce06647ffcbd1fc5988ba3021970e770
SHA256

c3bc66ce2854cb0d876064d9db6f914954b627183d7707c10b6c704fe8bc0d0a
SHA512

1f0fb3571fd006190c66cac9667268187d751cd2b2ab025de61ce59ed4b00fb4a1068cd70585a4513782b1da7f5d3e3b15b4c80f6b948feafe0084cdea6126bf
SSDEEP

768:4T7zzabcv30NuMkNNe1ZV6ieZopVqYU/9++WdoOkG5OoySP9SpcL1GbNg2sZ9K4x:ZjKaM/g+WuVpcL1GbNg2sZ9WmbF7

Score

10^/10

njrat b hat discovery trojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

B HAT

Mutex

c3f67240befd41c0bbbef976afa47823

Attributes

reg_key
c3f67240befd41c0bbbef976afa47823
splitter
|'|'|

Targets

- Target
  
  e051d24f412df43ff14a7e7b268dfdc1_JaffaCakes118
- Size
  
  69KB
- MD5
  
  e051d24f412df43ff14a7e7b268dfdc1
- SHA1
  
  4ce635c9ce06647ffcbd1fc5988ba3021970e770
- SHA256
  
  c3bc66ce2854cb0d876064d9db6f914954b627183d7707c10b6c704fe8bc0d0a
- SHA512
  
  1f0fb3571fd006190c66cac9667268187d751cd2b2ab025de61ce59ed4b00fb4a1068cd70585a4513782b1da7f5d3e3b15b4c80f6b948feafe0084cdea6126bf
- SSDEEP
  
  768:4T7zzabcv30NuMkNNe1ZV6ieZopVqYU/9++WdoOkG5OoySP9SpcL1GbNg2sZ9K4x:ZjKaM/g+WuVpcL1GbNg2sZ9WmbF7
Score

10^/10

njrat b hat discovery trojan
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratb hatdiscoverytrojan

behavioral2

njratb hatdiscoverytrojan