njrat | hxxps://github[.]com/Viper4K/malware/archive/refs/heads/master[.]zip

Resubmissions

14-12-2024 14:50

241214-r7ls1svqdy 10

14-12-2024 14:44

241214-r4e63avpfv 10

14-12-2024 14:40

241214-r12kwswrhr 6

14-12-2024 14:37

241214-rzfl2awrfl 10

Sharing

Copy URL

Twitter E-mail

General

Target

https://github.com/Viper4K/malware/archive/refs/heads/master.zip
Sample

241214-rzfl2awrfl

Score

10^/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Slaves

hom135.ddns.net:100

Mutex

d4903fdacbb79e6cd1109a741a2bc821

Attributes

reg_key
d4903fdacbb79e6cd1109a741a2bc821
splitter
|'|'|

Targets

- Target
  
  https://github.com/Viper4K/malware/archive/refs/heads/master.zip
Score

10^/10

njrat slaves discovery evasion trojan upx
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

T1543

Windows Service

T1543.003

Privilege Escalation

Create or Modify System Process

T1543

Windows Service

T1543.003

Defense Evasion

Impair Defenses

T1562

Disable or Modify System Firewall

T1562.004

Credential Access

Discovery

Browser Information Discovery

T1217

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Extracted

Targets

Njrat family

njRAT/Bladabindi

Modifies Windows Firewall

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

urlscan1

behavioral1