njrat | e0e8a7c2ce540f674aea4fb7d880a16021dfd15552897b01bfdfa2d0981b9aed | Triage

Sharing

General

Target

e0e8a7c2ce540f674aea4fb7d880a16021dfd15552897b01bfdfa2d0981b9aed.exe
Size

43KB
Sample

241217-ftf5tssnfq
MD5

4df91688458d5a32f5a2bc93b6c81094
SHA1

43866e87b1cb0e5c7f52b91eeabfb6816698b070
SHA256

e0e8a7c2ce540f674aea4fb7d880a16021dfd15552897b01bfdfa2d0981b9aed
SHA512

a9e28b1cea690e7774d6f5a102237cad0882615e066f6dbe0e2b9da8dbd3ae2a29e63ea73bd083409771108ce1d2cb1845271e0fe4a9a71f9dcb46bec62da491
SSDEEP

384:fZy5cYFgpWoy7ythdq+sEJ+3AkhzYIij+ZsNO3PlpJKkkjh/TzF7pWn3mgreT0pO:hWWol7UhdZIwuuXQ/oeC+L

Score

10^/10

njrat hacked discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

82.193.104.21:5137

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  e0e8a7c2ce540f674aea4fb7d880a16021dfd15552897b01bfdfa2d0981b9aed.exe
- Size
  
  43KB
- MD5
  
  4df91688458d5a32f5a2bc93b6c81094
- SHA1
  
  43866e87b1cb0e5c7f52b91eeabfb6816698b070
- SHA256
  
  e0e8a7c2ce540f674aea4fb7d880a16021dfd15552897b01bfdfa2d0981b9aed
- SHA512
  
  a9e28b1cea690e7774d6f5a102237cad0882615e066f6dbe0e2b9da8dbd3ae2a29e63ea73bd083409771108ce1d2cb1845271e0fe4a9a71f9dcb46bec62da491
- SSDEEP
  
  384:fZy5cYFgpWoy7ythdq+sEJ+3AkhzYIij+ZsNO3PlpJKkkjh/TzF7pWn3mgreT0pO:hWWol7UhdZIwuuXQ/oeC+L
Score

10^/10

njrat hacked discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njrathackeddiscoverytrojan

behavioral2

njrathackeddiscoverytrojan