njrat | d9c45d9161929da4e7181ccc59e81b50f3351396655e693b4e1f6e403bec2333 | Triage

Sharing

General

Target

d9c45d9161929da4e7181ccc59e81b50f3351396655e693b4e1f6e403bec2333N
Size

93KB
Sample

241027-ybkdmsynam
MD5

77290e15804679684f8ca4aa6691c3f0
SHA1

5ebabea149c5126d7530ea62821a9e21a8264ac9
SHA256

d9c45d9161929da4e7181ccc59e81b50f3351396655e693b4e1f6e403bec2333
SHA512

10b86afc0788e077662bb107cbab21651545fe51535a089d53dd4e097ff63b58f32dd327642e0a43a64743e404637c6c27179b240244715e63114652e48b2e0a
SSDEEP

1536:VU/r7EkrjaFIs7E5OxzJn8LjEwzGi1dD6D+gS:VU7jau5OVVni1dcj

Score

10^/10

njrat hacked discovery evasion persistence privilege_escalation

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

1.248.110.117:6522

Mutex

32ff384f428118177a2593d72a845212

Attributes

reg_key
32ff384f428118177a2593d72a845212
splitter
|'|'|

Targets

- Target
  
  d9c45d9161929da4e7181ccc59e81b50f3351396655e693b4e1f6e403bec2333N
- Size
  
  93KB
- MD5
  
  77290e15804679684f8ca4aa6691c3f0
- SHA1
  
  5ebabea149c5126d7530ea62821a9e21a8264ac9
- SHA256
  
  d9c45d9161929da4e7181ccc59e81b50f3351396655e693b4e1f6e403bec2333
- SHA512
  
  10b86afc0788e077662bb107cbab21651545fe51535a089d53dd4e097ff63b58f32dd327642e0a43a64743e404637c6c27179b240244715e63114652e48b2e0a
- SSDEEP
  
  1536:VU/r7EkrjaFIs7E5OxzJn8LjEwzGi1dD6D+gS:VU7jau5OVVni1dcj
Score

8^/10

discovery evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation

behavioral2

discoveryevasionpersistenceprivilege_escalation