njrat | e2bf3d37ddf4f4db311467cbeaab0e7b1c217e53fa313861b987da2402542df9 | Triage

Sharing

General

Target

e2bf3d37ddf4f4db311467cbeaab0e7b1c217e53fa313861b987da2402542df9N
Size

43KB
Sample

241027-wv8t8syjcz
MD5

b5fbad1ebd0c1f721b6bedaad5aed9f0
SHA1

a55cecffa5d90aeb5938e81b22c6ce68797f41ab
SHA256

e2bf3d37ddf4f4db311467cbeaab0e7b1c217e53fa313861b987da2402542df9
SHA512

1d73ba203ff123f9284d6cbe6ba0184c3af05f8018be6d8d1ec3de7fc52dd5e0f12e97fa5a9ad6a83a23828429331de95728dec208651d3f860744343fb16855
SSDEEP

384:WZy+x7q1STss7yKStZ9gQ8ExUZS2azsIij+ZsNO3PlpJKkkjh/TzF7pWn5TgreTf:MZGk4smKS39xNU0zuXQ/o8D+L

Score

10^/10

njrat colara 2.9 discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

colara 2.9

C2

127.0.0.1:5552

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  e2bf3d37ddf4f4db311467cbeaab0e7b1c217e53fa313861b987da2402542df9N
- Size
  
  43KB
- MD5
  
  b5fbad1ebd0c1f721b6bedaad5aed9f0
- SHA1
  
  a55cecffa5d90aeb5938e81b22c6ce68797f41ab
- SHA256
  
  e2bf3d37ddf4f4db311467cbeaab0e7b1c217e53fa313861b987da2402542df9
- SHA512
  
  1d73ba203ff123f9284d6cbe6ba0184c3af05f8018be6d8d1ec3de7fc52dd5e0f12e97fa5a9ad6a83a23828429331de95728dec208651d3f860744343fb16855
- SSDEEP
  
  384:WZy+x7q1STss7yKStZ9gQ8ExUZS2azsIij+ZsNO3PlpJKkkjh/TzF7pWn5TgreTf:MZGk4smKS39xNU0zuXQ/o8D+L
Score

10^/10

njrat colara 2.9 discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

colara 2.9njrat

behavioral1

njratcolara 2.9discoverytrojan

behavioral2

njratcolara 2.9discoverytrojan