njrat | 78af7f498ca41231b61a56ec5055ebd4c2b9e4f3414887370ebe9381d16886a0 | Triage

Sharing

General

Target

7856ded2aafee86032cf0194ca4b8d53_JaffaCakes118
Size

112KB
Sample

241028-hyya1stbnh
MD5

7856ded2aafee86032cf0194ca4b8d53
SHA1

e1a34bd8a6a27c6d85e7d06a35e1d1985a2e038b
SHA256

78af7f498ca41231b61a56ec5055ebd4c2b9e4f3414887370ebe9381d16886a0
SHA512

e9af4b16c89253f1e0eb7714c7d9995fe097c5e9b99e2e7438fc43bef51d16cfcdb7b43abd2386da498924bdc3188b8090930ce9d1ad68ff5efd249b582e3205
SSDEEP

1536:zkVrZUbD7aDX1QCSFhlj+fwMp0WgEsKwP1imkIk74+73rw5e8KRfV38e2YwjfAmQ:zkZCD7yQXifzqDEsK41ia+7UwV5mQ

Score

10^/10

njrat discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  7856ded2aafee86032cf0194ca4b8d53_JaffaCakes118
- Size
  
  112KB
- MD5
  
  7856ded2aafee86032cf0194ca4b8d53
- SHA1
  
  e1a34bd8a6a27c6d85e7d06a35e1d1985a2e038b
- SHA256
  
  78af7f498ca41231b61a56ec5055ebd4c2b9e4f3414887370ebe9381d16886a0
- SHA512
  
  e9af4b16c89253f1e0eb7714c7d9995fe097c5e9b99e2e7438fc43bef51d16cfcdb7b43abd2386da498924bdc3188b8090930ce9d1ad68ff5efd249b582e3205
- SSDEEP
  
  1536:zkVrZUbD7aDX1QCSFhlj+fwMp0WgEsKwP1imkIk74+73rw5e8KRfV38e2YwjfAmQ:zkZCD7yQXifzqDEsK41ia+7UwV5mQ
Score

10^/10

njrat discovery evasion persistence privilege_escalation trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratdiscoveryevasionpersistenceprivilege_escalationtrojan

behavioral2

njratdiscoveryevasionpersistenceprivilege_escalationtrojan