njrat | 9e0402dd74192fd4235d896ee59d54af833699fee031f71793242dd910262404 | Triage

Sharing

General

Target

9e0402dd74192fd4235d896ee59d54af833699fee031f71793242dd910262404
Size

93KB
Sample

241019-bm46vsyala
MD5

ec78d87dc78d9b162d9039cbe95f1e4c
SHA1

246b98c62eeb61972320984be380e95a20481d37
SHA256

9e0402dd74192fd4235d896ee59d54af833699fee031f71793242dd910262404
SHA512

3e682d04b10d8d3b4450db4e349a70391bfc091f889a4ca52d0f8f8b99fbfebb8acd1751683de299c4cb5c4dc199121b4b453f24dec6d8d3fc7313cf41089b23
SSDEEP

768:tY3jxfhWXxyFcxovUKUJuROprXtWNzeYhYbmXxrjEtCdnl2pi1Rz4Rk3vsGdp4gM:sx5WhIUKcuOJ2PhBjEwzGi1dD7D4gS

Score

10^/10

njrat sssssss discovery evasion persistence privilege_escalation

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

sSsSsSs

C2

hakim32.ddns.net:2000

127.0.0.1:5552

Mutex

760a119954d625f2e21f4c5db4622283

Attributes

reg_key
760a119954d625f2e21f4c5db4622283
splitter
|'|'|

Targets

- Target
  
  9e0402dd74192fd4235d896ee59d54af833699fee031f71793242dd910262404
- Size
  
  93KB
- MD5
  
  ec78d87dc78d9b162d9039cbe95f1e4c
- SHA1
  
  246b98c62eeb61972320984be380e95a20481d37
- SHA256
  
  9e0402dd74192fd4235d896ee59d54af833699fee031f71793242dd910262404
- SHA512
  
  3e682d04b10d8d3b4450db4e349a70391bfc091f889a4ca52d0f8f8b99fbfebb8acd1751683de299c4cb5c4dc199121b4b453f24dec6d8d3fc7313cf41089b23
- SSDEEP
  
  768:tY3jxfhWXxyFcxovUKUJuROprXtWNzeYhYbmXxrjEtCdnl2pi1Rz4Rk3vsGdp4gM:sx5WhIUKcuOJ2PhBjEwzGi1dD7D4gS
Score

8^/10

discovery evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation

behavioral2

discoveryevasionpersistenceprivilege_escalation