njrat | 9293a9487c96aca3b695071393574d33c53518531a1320a655b6c827e77a633c | Triage

Sharing

General

Target

9293a9487c96aca3b695071393574d33c53518531a1320a655b6c827e77a633c.exe
Size

156KB
Sample

241009-jqx6qawdpp
MD5

03d627a796cf0d8aa18615ed115c46dc
SHA1

9001841efe3b0ef53bee290383ece21a301e8ed4
SHA256

9293a9487c96aca3b695071393574d33c53518531a1320a655b6c827e77a633c
SHA512

d8b6c27b229dca9570bbfc21d43cd9034c7caaa122991e61333963dcc3d224340ea78d853274e17b63699dc519af7a16b9d2e0605b5e17d9cf7ce5db3af4d839
SSDEEP

3072:WEyOcR00MG7ugRabuLTIm/jTbvEEfgA8m7Nh11dCAXEU8K:SB7/RLMuvEAg07HdC6mK

Score

10^/10

njrat discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  9293a9487c96aca3b695071393574d33c53518531a1320a655b6c827e77a633c.exe
- Size
  
  156KB
- MD5
  
  03d627a796cf0d8aa18615ed115c46dc
- SHA1
  
  9001841efe3b0ef53bee290383ece21a301e8ed4
- SHA256
  
  9293a9487c96aca3b695071393574d33c53518531a1320a655b6c827e77a633c
- SHA512
  
  d8b6c27b229dca9570bbfc21d43cd9034c7caaa122991e61333963dcc3d224340ea78d853274e17b63699dc519af7a16b9d2e0605b5e17d9cf7ce5db3af4d839
- SSDEEP
  
  3072:WEyOcR00MG7ugRabuLTIm/jTbvEEfgA8m7Nh11dCAXEU8K:SB7/RLMuvEAg07HdC6mK
Score

10^/10

njrat discovery evasion persistence privilege_escalation trojan
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  evasion
- Drops startup file
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratdiscoveryevasionpersistenceprivilege_escalationtrojan

behavioral2

njratdiscoveryevasionpersistenceprivilege_escalationtrojan