njrat | 3a20902cf47bb1fd33fde4a887368ced236033577487e16da10ddb03edb9f5d4 | Triage

Sharing

General

Target

3a20902cf47bb1fd33fde4a887368ced236033577487e16da10ddb03edb9f5d4N
Size

79KB
Sample

241022-23e5sayekb
MD5

f9a5690ec0d1d276ca7a8681725e9550
SHA1

c0efa6920a850440375f54fa15284ecc334ca051
SHA256

3a20902cf47bb1fd33fde4a887368ced236033577487e16da10ddb03edb9f5d4
SHA512

5b8aabf89d02b572305112241cd7c573578ba66df771fe08456f9c90848fe605b56558fe9a2294f7a20dabc04de9dcd6290c9df7a15f847ebd438dbb375e2e5d
SSDEEP

1536:T1bUtD+PQIPrVIcj+AbRgp2qPzATSsN2sf7xJzXZ:T1bq+1rVzf6YXTxJXZ

Score

10^/10

njrat discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  3a20902cf47bb1fd33fde4a887368ced236033577487e16da10ddb03edb9f5d4N
- Size
  
  79KB
- MD5
  
  f9a5690ec0d1d276ca7a8681725e9550
- SHA1
  
  c0efa6920a850440375f54fa15284ecc334ca051
- SHA256
  
  3a20902cf47bb1fd33fde4a887368ced236033577487e16da10ddb03edb9f5d4
- SHA512
  
  5b8aabf89d02b572305112241cd7c573578ba66df771fe08456f9c90848fe605b56558fe9a2294f7a20dabc04de9dcd6290c9df7a15f847ebd438dbb375e2e5d
- SSDEEP
  
  1536:T1bUtD+PQIPrVIcj+AbRgp2qPzATSsN2sf7xJzXZ:T1bq+1rVzf6YXTxJXZ
Score

10^/10

njrat discovery evasion persistence privilege_escalation trojan
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  evasion
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratdiscoveryevasionpersistenceprivilege_escalationtrojan

behavioral2

njratdiscoveryevasionpersistenceprivilege_escalationtrojan