njrat | c14f3fefdabea37941f95903670db4693253910fc22e762568c9f9cba614678e | Triage

Sharing

General

Target

c14f3fefdabea37941f95903670db4693253910fc22e762568c9f9cba614678eN
Size

163KB
Sample

241006-re7vsascpg
MD5

6627bfaeba3a1d6f15254edce64d8190
SHA1

a26ab0dfaca6319280ecc8b67b59ee29ec043597
SHA256

c14f3fefdabea37941f95903670db4693253910fc22e762568c9f9cba614678e
SHA512

d72ad997fe30e1cf55b913187701744ebab4589caad67a14bfef1956d867c29b06884258522ab8c18a8b7cc52413e6234e76b2888b2f51b6245b5c7bd93cc534
SSDEEP

3072:UxVmqYkHe/O77wE8LRDr4ZEDSoWW43LILb1b2AbL3Uw3:6RfJ8LRH4ZEGoWWYLQb2c3Ug

Score

10^/10

njrat discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  c14f3fefdabea37941f95903670db4693253910fc22e762568c9f9cba614678eN
- Size
  
  163KB
- MD5
  
  6627bfaeba3a1d6f15254edce64d8190
- SHA1
  
  a26ab0dfaca6319280ecc8b67b59ee29ec043597
- SHA256
  
  c14f3fefdabea37941f95903670db4693253910fc22e762568c9f9cba614678e
- SHA512
  
  d72ad997fe30e1cf55b913187701744ebab4589caad67a14bfef1956d867c29b06884258522ab8c18a8b7cc52413e6234e76b2888b2f51b6245b5c7bd93cc534
- SSDEEP
  
  3072:UxVmqYkHe/O77wE8LRDr4ZEDSoWW43LILb1b2AbL3Uw3:6RfJ8LRH4ZEGoWWYLQb2c3Ug
Score

10^/10

njrat discovery evasion persistence privilege_escalation trojan
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratdiscoveryevasionpersistenceprivilege_escalationtrojan

behavioral2

njratdiscoveryevasionpersistenceprivilege_escalationtrojan