njrat | 4f761ff41a36714a29f78688d1807351ac5783530dba666ab3ff214b87e3668b | Triage

Sharing

General

Target

eae536f4dbbfd54a08e16e2e92203324_JaffaCakes118
Size

561KB
Sample

240919-jtfqvaydnq
MD5

eae536f4dbbfd54a08e16e2e92203324
SHA1

da8e9ed71efe650ef94815ad586773155e19cc97
SHA256

4f761ff41a36714a29f78688d1807351ac5783530dba666ab3ff214b87e3668b
SHA512

409bac9a2164ab6c23b88851ce548edd77b004ca51d6cdab812ad45c7f61671c7876f4243249e43e5121d3c0e2ad8b9ce98717f41f2b125770a325a706519712
SSDEEP

6144:2aYmv6zpATfTjsEEa/qeOaJbS032q//dldSoKS4+VDI82aIn:hH7yN0P/tSCRV+

Score

10^/10

njrat b hat discovery trojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

B HAT

Mutex

10ca05d5cbef4f8797241b524c316666

Attributes

reg_key
10ca05d5cbef4f8797241b524c316666
splitter
|'|'|

Targets

- Target
  
  eae536f4dbbfd54a08e16e2e92203324_JaffaCakes118
- Size
  
  561KB
- MD5
  
  eae536f4dbbfd54a08e16e2e92203324
- SHA1
  
  da8e9ed71efe650ef94815ad586773155e19cc97
- SHA256
  
  4f761ff41a36714a29f78688d1807351ac5783530dba666ab3ff214b87e3668b
- SHA512
  
  409bac9a2164ab6c23b88851ce548edd77b004ca51d6cdab812ad45c7f61671c7876f4243249e43e5121d3c0e2ad8b9ce98717f41f2b125770a325a706519712
- SSDEEP
  
  6144:2aYmv6zpATfTjsEEa/qeOaJbS032q//dldSoKS4+VDI82aIn:hH7yN0P/tSCRV+
Score

10^/10

njrat b hat discovery trojan
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratb hatdiscoverytrojan

behavioral2

njratb hatdiscoverytrojan