njrat | 7f90d1d2465e6b3c69236275c96662690ccc5eef0d4b4ed2dd90bdf298cc7539 | Triage

Sharing

General

Target

7f90d1d2465e6b3c69236275c96662690ccc5eef0d4b4ed2dd90bdf298cc7539.exe
Size

25KB
Sample

240928-jm6cxsvaqm
MD5

fe8b74facf33c3cb9c2399d0e32b6e90
SHA1

d877d8201468404dfa5e286e0fcc6b3d535886f1
SHA256

7f90d1d2465e6b3c69236275c96662690ccc5eef0d4b4ed2dd90bdf298cc7539
SHA512

3a679ff30e786f86ef9f6b1912a8358c2710b54fece7d1af7425095ee3ebd7726cb64c0caf7a289cb302c65523229a9be21ff8ce8e51c8d3a40deb8813090189
SSDEEP

768:5vkVCd2emvs+uWoT60lkcDjRfoXMxGfihbo:yEEDvsDWaKIjFoXKQiC

Score

10^/10

njrat topher discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

topher

C2

mehmet741.duckdsn.org:81

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  7f90d1d2465e6b3c69236275c96662690ccc5eef0d4b4ed2dd90bdf298cc7539.exe
- Size
  
  25KB
- MD5
  
  fe8b74facf33c3cb9c2399d0e32b6e90
- SHA1
  
  d877d8201468404dfa5e286e0fcc6b3d535886f1
- SHA256
  
  7f90d1d2465e6b3c69236275c96662690ccc5eef0d4b4ed2dd90bdf298cc7539
- SHA512
  
  3a679ff30e786f86ef9f6b1912a8358c2710b54fece7d1af7425095ee3ebd7726cb64c0caf7a289cb302c65523229a9be21ff8ce8e51c8d3a40deb8813090189
- SSDEEP
  
  768:5vkVCd2emvs+uWoT60lkcDjRfoXMxGfihbo:yEEDvsDWaKIjFoXKQiC
Score

10^/10

njrat topher discovery trojan
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njrattopherdiscoverytrojan

behavioral2

njrattophertrojan