njrat | 5cae24059c7bdeb3e62e748a8f7d8c7165bbf2e46adace7f28e40e7637793d51 | Triage

Sharing

General

Target

Payload.exe
Size

55KB
Sample

241207-m98y4svrhl
MD5

3718f276b92111f2efad4aa86b017604
SHA1

8db8f30eff1e3faf6440f5f613aecf571a2f501e
SHA256

5cae24059c7bdeb3e62e748a8f7d8c7165bbf2e46adace7f28e40e7637793d51
SHA512

38b55da47bf56646c4a985413fa1a789982047aff7ae3d1ee576d9cfa567a87da8be8a3ba9a5fc5ca6d8d673091728c2fad119d118c40b6fcd3e3847a42299c8
SSDEEP

768:/+iyFut1MankI2N9hi8QR3Q0kSN7mwFvfu0YMDHPsAL7XJSxI3pmQm:/+F8Dn2N9hi8KdDywsNMDDXExI3pmQm

Score

10^/10

njrat victim discovery trojan

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

youth-latex.gl.at.ply.gg:56149

Mutex

fdc3f971c65eadc3bce063f352d8ce09

Attributes

reg_key
fdc3f971c65eadc3bce063f352d8ce09
splitter
Y262SUCZ4UJJ

Targets

- Target
  
  Payload.exe
- Size
  
  55KB
- MD5
  
  3718f276b92111f2efad4aa86b017604
- SHA1
  
  8db8f30eff1e3faf6440f5f613aecf571a2f501e
- SHA256
  
  5cae24059c7bdeb3e62e748a8f7d8c7165bbf2e46adace7f28e40e7637793d51
- SHA512
  
  38b55da47bf56646c4a985413fa1a789982047aff7ae3d1ee576d9cfa567a87da8be8a3ba9a5fc5ca6d8d673091728c2fad119d118c40b6fcd3e3847a42299c8
- SSDEEP
  
  768:/+iyFut1MankI2N9hi8QR3Q0kSN7mwFvfu0YMDHPsAL7XJSxI3pmQm:/+F8Dn2N9hi8KdDywsNMDDXExI3pmQm
Score

10^/10

njrat discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Remote System Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratdiscoverytrojan