njrat | b63b91a9eac90862e4e13a524199505f882391680c89836da7b6a9a7b52436e9 | Triage

Sharing

General

Target

b63b91a9eac90862e4e13a524199505f882391680c89836da7b6a9a7b52436e9.exe
Size

54KB
Sample

241126-plcxwa1law
MD5

512b1c1d3ec3e59e826973e08baddbf7
SHA1

2d08b1003d0a590e74ee9fbd0e2de6e22110de04
SHA256

b63b91a9eac90862e4e13a524199505f882391680c89836da7b6a9a7b52436e9
SHA512

4960189dc899edce882f93e0997f7666f8d0ac16e27409c7d1f084650b2fb0990d126553f3eea4bd6d3932d9fda17d4d70d7b5b2ac9440403506eba21a307419
SSDEEP

768:5iLUopHx2EsltsKlZuH+J3UqJSNfxWQG35bmaePD5PvHj2XXJdxIEpm5g2:5iLD9GtsK6+JjG5WQcGD9YX3xIEpm5g2

Score

10^/10

njrat victim discovery trojan

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

jvhcfgx.localto.net:4464

Mutex

bb27684ed69cc3c1b93b1a679ff8706e

Attributes

reg_key
bb27684ed69cc3c1b93b1a679ff8706e
splitter
Y262SUCZ4UJJ

Targets

- Target
  
  b63b91a9eac90862e4e13a524199505f882391680c89836da7b6a9a7b52436e9.exe
- Size
  
  54KB
- MD5
  
  512b1c1d3ec3e59e826973e08baddbf7
- SHA1
  
  2d08b1003d0a590e74ee9fbd0e2de6e22110de04
- SHA256
  
  b63b91a9eac90862e4e13a524199505f882391680c89836da7b6a9a7b52436e9
- SHA512
  
  4960189dc899edce882f93e0997f7666f8d0ac16e27409c7d1f084650b2fb0990d126553f3eea4bd6d3932d9fda17d4d70d7b5b2ac9440403506eba21a307419
- SSDEEP
  
  768:5iLUopHx2EsltsKlZuH+J3UqJSNfxWQG35bmaePD5PvHj2XXJdxIEpm5g2:5iLD9GtsK6+JjG5WQcGD9YX3xIEpm5g2
Score

10^/10

njrat discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratdiscoverytrojan

behavioral2

njratdiscoverytrojan