njrat | 79174249fde1fe4f55f92724843cfb41da203f62f6d22c222a4084eeac4852dc | Triage

Sharing

General

Target

122e243712261a6f082ceb95f03ac19a.exe
Size

65KB
Sample

241014-2h8atszdrg
MD5

122e243712261a6f082ceb95f03ac19a
SHA1

6b5e8e187dca976e830a7c95056ef956cce6b61d
SHA256

79174249fde1fe4f55f92724843cfb41da203f62f6d22c222a4084eeac4852dc
SHA512

03f93fc14b1d419819e2a5af713d834c81695288f41c2d98ab03c9e4a9a31092a70c1f97875fa32446077e3a322f737de956bcd1a5d8ef18a1006c870f1e1480
SSDEEP

1536:iF+u2LoN36tcQviFw12+1IBnvAofLteF3nLrB9z3nuaF9bWS9vM:iF+uIoN36tcQviFCbGBnXfWl9zeaF9bG

Score

10^/10

njrat hacked discovery

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

HacKed

C2

127.0.0.1:18377

Mutex

Client.exe

Attributes

reg_key
Client.exe
splitter
|Ghost|

Targets

- Target
  
  122e243712261a6f082ceb95f03ac19a.exe
- Size
  
  65KB
- MD5
  
  122e243712261a6f082ceb95f03ac19a
- SHA1
  
  6b5e8e187dca976e830a7c95056ef956cce6b61d
- SHA256
  
  79174249fde1fe4f55f92724843cfb41da203f62f6d22c222a4084eeac4852dc
- SHA512
  
  03f93fc14b1d419819e2a5af713d834c81695288f41c2d98ab03c9e4a9a31092a70c1f97875fa32446077e3a322f737de956bcd1a5d8ef18a1006c870f1e1480
- SSDEEP
  
  1536:iF+u2LoN36tcQviFw12+1IBnvAofLteF3nLrB9z3nuaF9bWS9vM:iF+uIoN36tcQviFCbGBnXfWl9zeaF9bG
Score

6^/10

discovery
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2