njrat | f01befb0270c212d3f5c8d4501e19c544aa57010bd30bbf1d9817789ef7d83d0 | Triage

Sharing

General

Target

f01befb0270c212d3f5c8d4501e19c544aa57010bd30bbf1d9817789ef7d83d0.exe
Size

32KB
Sample

241006-ntm75swfrd
MD5

a8f6fa7a488944a8e0362dfb6f18988b
SHA1

8e4725c2233d74834756d1a42448748327b9ecee
SHA256

f01befb0270c212d3f5c8d4501e19c544aa57010bd30bbf1d9817789ef7d83d0
SHA512

51c0af1a62741019fe0f11656dfbcc00b8b3adb1b6df06cc7f9bac1fe90a6b9a345bfefe2b5f818189b84a22f79eefb8838a2eb732019419eb2b063ba0418d66
SSDEEP

384:9/it2wUQCG+JexvsiOrhAh9kLAZFPI+uT00olDModg9TdFpyFEIGsJjwE7UMcri3:QiGtUrrhAAA/iouDbEEIGfR6+f

Score

10^/10

njrat hacked by hidden person discovery trojan

Malware Config

Extracted

Family

njrat

Botnet

Hacked By HiDDen PerSOn

Mutex

4cae72edef05515628e131732c15c61e

Attributes

reg_key
4cae72edef05515628e131732c15c61e

Targets

- Target
  
  f01befb0270c212d3f5c8d4501e19c544aa57010bd30bbf1d9817789ef7d83d0.exe
- Size
  
  32KB
- MD5
  
  a8f6fa7a488944a8e0362dfb6f18988b
- SHA1
  
  8e4725c2233d74834756d1a42448748327b9ecee
- SHA256
  
  f01befb0270c212d3f5c8d4501e19c544aa57010bd30bbf1d9817789ef7d83d0
- SHA512
  
  51c0af1a62741019fe0f11656dfbcc00b8b3adb1b6df06cc7f9bac1fe90a6b9a345bfefe2b5f818189b84a22f79eefb8838a2eb732019419eb2b063ba0418d66
- SSDEEP
  
  384:9/it2wUQCG+JexvsiOrhAh9kLAZFPI+uT00olDModg9TdFpyFEIGsJjwE7UMcri3:QiGtUrrhAAA/iouDbEEIGfR6+f
Score

10^/10

njrat hacked by hidden person discovery trojan
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

hacked by hidden personnjrat

behavioral1

njrathacked by hidden persondiscoverytrojan

behavioral2