njrat | 6e78135df469622bd2c705f8d37bb07c76fe53d7af3d3617a2f1d73e72774b36 | Triage

Sharing

General

Target

6e78135df469622bd2c705f8d37bb07c76fe53d7af3d3617a2f1d73e72774b36.exe
Size

22KB
Sample

240927-vne3xascrm
MD5

a04052a80b7640128b994d5a967b5095
SHA1

ed840b4453dcd5892996776daacb02072aeaf344
SHA256

6e78135df469622bd2c705f8d37bb07c76fe53d7af3d3617a2f1d73e72774b36
SHA512

0f6043ca862b3eaa4af6bf0cfdfe6a461eb523ea5a2a9aa57d22b94ab8b84558ced2bae6f91e635c5ccc8f11f73e096e02efc01db93a8d8b21d310fbda88d7b6
SSDEEP

384:uC14jk13flpK44Gokt6JWT5zp7FqoFj3E/xNnDC:uC14jkz9pt6vI0rO

Score

10^/10

njrat test bypass cho down load discovery

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Test Bypass cho down load

C2

127.0.0.1:1234

Mutex

165d6ed988ac

Attributes

reg_key
165d6ed988ac
splitter
|'|'|

Targets

- Target
  
  6e78135df469622bd2c705f8d37bb07c76fe53d7af3d3617a2f1d73e72774b36.exe
- Size
  
  22KB
- MD5
  
  a04052a80b7640128b994d5a967b5095
- SHA1
  
  ed840b4453dcd5892996776daacb02072aeaf344
- SHA256
  
  6e78135df469622bd2c705f8d37bb07c76fe53d7af3d3617a2f1d73e72774b36
- SHA512
  
  0f6043ca862b3eaa4af6bf0cfdfe6a461eb523ea5a2a9aa57d22b94ab8b84558ced2bae6f91e635c5ccc8f11f73e096e02efc01db93a8d8b21d310fbda88d7b6
- SSDEEP
  
  384:uC14jk13flpK44Gokt6JWT5zp7FqoFj3E/xNnDC:uC14jkz9pt6vI0rO
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

test bypass cho down loadnjrat

behavioral1

behavioral2