njrat | a4a6648fe48fec4f80c822fe6be5aba2db57c99388a2f9faa5a9f00505c8191f | Triage

Sharing

General

Target

a4a6648fe48fec4f80c822fe6be5aba2db57c99388a2f9faa5a9f00505c8191fN.exe
Size

193KB
Sample

241219-cncnnssmfs
MD5

79a57ed59e419633e825e3a65a791400
SHA1

2e834f4eab832c3a00dbfced32560a53e9853431
SHA256

a4a6648fe48fec4f80c822fe6be5aba2db57c99388a2f9faa5a9f00505c8191f
SHA512

59c37cfc18691095f94d19993106c870b6adf4915facbbc569b6ad5162a9e1de29cb6b4a0f608f0677b4b0526ecb96eaab54f3f67fe93238e90869d6f599da30
SSDEEP

3072:xS7enSf0HRqIImbS6q3/jjkBfKs4WjX8:eMHRS137Qz4

Score

10^/10

njrat discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  a4a6648fe48fec4f80c822fe6be5aba2db57c99388a2f9faa5a9f00505c8191fN.exe
- Size
  
  193KB
- MD5
  
  79a57ed59e419633e825e3a65a791400
- SHA1
  
  2e834f4eab832c3a00dbfced32560a53e9853431
- SHA256
  
  a4a6648fe48fec4f80c822fe6be5aba2db57c99388a2f9faa5a9f00505c8191f
- SHA512
  
  59c37cfc18691095f94d19993106c870b6adf4915facbbc569b6ad5162a9e1de29cb6b4a0f608f0677b4b0526ecb96eaab54f3f67fe93238e90869d6f599da30
- SSDEEP
  
  3072:xS7enSf0HRqIImbS6q3/jjkBfKs4WjX8:eMHRS137Qz4
Score

8^/10

discovery evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation

behavioral2

discoveryevasionpersistenceprivilege_escalation