njrat | 893e98663da3f045f2dfa30e20114690d3205c1e9f05b2f097db9c75b8384340 | Triage

Sharing

General

Target

893e98663da3f045f2dfa30e20114690d3205c1e9f05b2f097db9c75b8384340.exe
Size

175KB
Sample

241123-kewdesxrgj
MD5

70c9ec0a86ebbec31cfa15376fb84702
SHA1

ac34af18b046c3b115dcff4290c03623df85e44a
SHA256

893e98663da3f045f2dfa30e20114690d3205c1e9f05b2f097db9c75b8384340
SHA512

8d93af53a662d95f1a371a726a658f7838de7648247d066857b91bb89e5e9c1f10b42d1d639659099e2f800bb0643609f87b18810ad96743b2d15dc0bdc84110
SSDEEP

3072:MRbEC2Oi8NXC797F8TBfFvj4bq5790sR+hsUDOj2M:M2C2F8NXC796TB9vj489Jes+OjJ

Score

10^/10

njrat discovery trojan

Malware Config

Targets

- Target
  
  893e98663da3f045f2dfa30e20114690d3205c1e9f05b2f097db9c75b8384340.exe
- Size
  
  175KB
- MD5
  
  70c9ec0a86ebbec31cfa15376fb84702
- SHA1
  
  ac34af18b046c3b115dcff4290c03623df85e44a
- SHA256
  
  893e98663da3f045f2dfa30e20114690d3205c1e9f05b2f097db9c75b8384340
- SHA512
  
  8d93af53a662d95f1a371a726a658f7838de7648247d066857b91bb89e5e9c1f10b42d1d639659099e2f800bb0643609f87b18810ad96743b2d15dc0bdc84110
- SSDEEP
  
  3072:MRbEC2Oi8NXC797F8TBfFvj4bq5790sR+hsUDOj2M:M2C2F8NXC796TB9vj489Jes+OjJ
Score

10^/10

njrat discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratdiscoverytrojan

behavioral2

njratdiscoverytrojan