njrat | fb106f8c95672b6e5d61d5cb2ee499ef3779610fd45ff85b357ac6da7cc23f35 | Triage

Sharing

General

Target

fb106f8c95672b6e5d61d5cb2ee499ef3779610fd45ff85b357ac6da7cc23f35N.exe
Size

54KB
Sample

241127-cfvjhsxpaj
MD5

d9c6c0fa21a4e31465b6fc7709e59dd0
SHA1

8c97e5faae3cce0e7194555fa550376c264b068d
SHA256

fb106f8c95672b6e5d61d5cb2ee499ef3779610fd45ff85b357ac6da7cc23f35
SHA512

788c98ee4e53071812791889487cd9f87e8e4c7d13111b3b38262bea901d6fd089cadad23c7a72ac54f50e7103041f91a10209ffe814e2479892316c9bc3e01b
SSDEEP

768:5iLUopHx2EsltsKlZuH+J3UqJSNfxWQG35bmaePD5PvHj2XXJdxIEpm5g:5iLD9GtsK6+JjG5WQcGD9YX3xIEpm5g

Score

10^/10

njrat victim discovery trojan

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

jvhcfgx.localto.net:4464

Mutex

bb27684ed69cc3c1b93b1a679ff8706e

Attributes

reg_key
bb27684ed69cc3c1b93b1a679ff8706e
splitter
Y262SUCZ4UJJ

Targets

- Target
  
  fb106f8c95672b6e5d61d5cb2ee499ef3779610fd45ff85b357ac6da7cc23f35N.exe
- Size
  
  54KB
- MD5
  
  d9c6c0fa21a4e31465b6fc7709e59dd0
- SHA1
  
  8c97e5faae3cce0e7194555fa550376c264b068d
- SHA256
  
  fb106f8c95672b6e5d61d5cb2ee499ef3779610fd45ff85b357ac6da7cc23f35
- SHA512
  
  788c98ee4e53071812791889487cd9f87e8e4c7d13111b3b38262bea901d6fd089cadad23c7a72ac54f50e7103041f91a10209ffe814e2479892316c9bc3e01b
- SSDEEP
  
  768:5iLUopHx2EsltsKlZuH+J3UqJSNfxWQG35bmaePD5PvHj2XXJdxIEpm5g:5iLD9GtsK6+JjG5WQcGD9YX3xIEpm5g
Score

10^/10

njrat discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratdiscoverytrojan

behavioral2

njratdiscoverytrojan