njrat | 00c616abfdef605cd732d845f0cb83a8210eca6c60008270d63014bcb5297e49 | Triage

Sharing

General

Target

00c616abfdef605cd732d845f0cb83a8210eca6c60008270d63014bcb5297e49.exe
Size

43KB
Sample

241201-q4wndaspg1
MD5

24e2e5504d9fd3984fecaf7ccb140d89
SHA1

bf338c1546b71a815be846b870c9bcfb7f6b9bce
SHA256

00c616abfdef605cd732d845f0cb83a8210eca6c60008270d63014bcb5297e49
SHA512

db538cf22a4e2208ae028b40b59c6410786db67892b739271ae10fd528462979dda3c4b89d8d03f3d00fb3ba805469b60e904661658520587acda5c02cecaddc
SSDEEP

384:oZy+nHU3VarE8yTVRUqnIQOMrg0ay0+O19D9O5UE5QzwBlpJNakkjh/TzF7pWn/E:eP03MY5T3UqnZm0pvQO+a9+Ln

Score

10^/10

njrat hacked by azzam discovery

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed By Azzam

C2

127.0.0.1:5552

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  00c616abfdef605cd732d845f0cb83a8210eca6c60008270d63014bcb5297e49.exe
- Size
  
  43KB
- MD5
  
  24e2e5504d9fd3984fecaf7ccb140d89
- SHA1
  
  bf338c1546b71a815be846b870c9bcfb7f6b9bce
- SHA256
  
  00c616abfdef605cd732d845f0cb83a8210eca6c60008270d63014bcb5297e49
- SHA512
  
  db538cf22a4e2208ae028b40b59c6410786db67892b739271ae10fd528462979dda3c4b89d8d03f3d00fb3ba805469b60e904661658520587acda5c02cecaddc
- SSDEEP
  
  384:oZy+nHU3VarE8yTVRUqnIQOMrg0ay0+O19D9O5UE5QzwBlpJNakkjh/TzF7pWn/E:eP03MY5T3UqnZm0pvQO+a9+Ln
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

hacked by azzamnjrat

behavioral1

behavioral2