njrat | 17cf67cf97f4235144a928eaa04bc13c60b3f17caae649d728035cf843deaa31 | Triage

Sharing

General

Target

17cf67cf97f4235144a928eaa04bc13c60b3f17caae649d728035cf843deaa31
Size

267KB
Sample

241227-ypeqbayqal
MD5

7e5f07b1d1f3d82b1d921e25c6e1aaa3
SHA1

3bdf0a91c0a3a3195f44f9f3074c0929048e20c3
SHA256

17cf67cf97f4235144a928eaa04bc13c60b3f17caae649d728035cf843deaa31
SHA512

600931eca764f09d96bb6058a253994ccc735d959382318f73d04e3d9fd433d8149dc82c1d638b27664597300d44171db375256c0e8c856c667f24cecf7ade72
SSDEEP

3072:onWg5lyjCxh0LBS17YpGolcqgNey6mPE6L/nA9svWlH2aiQXMi8sOjXo:63+oOwXqqeyBLL/nA9VH2s80qo

Score

10^/10

njrat trojan

Malware Config

Targets

- Target
  
  17cf67cf97f4235144a928eaa04bc13c60b3f17caae649d728035cf843deaa31
- Size
  
  267KB
- MD5
  
  7e5f07b1d1f3d82b1d921e25c6e1aaa3
- SHA1
  
  3bdf0a91c0a3a3195f44f9f3074c0929048e20c3
- SHA256
  
  17cf67cf97f4235144a928eaa04bc13c60b3f17caae649d728035cf843deaa31
- SHA512
  
  600931eca764f09d96bb6058a253994ccc735d959382318f73d04e3d9fd433d8149dc82c1d638b27664597300d44171db375256c0e8c856c667f24cecf7ade72
- SSDEEP
  
  3072:onWg5lyjCxh0LBS17YpGolcqgNey6mPE6L/nA9svWlH2aiQXMi8sOjXo:63+oOwXqqeyBLL/nA9VH2s80qo
Score

10^/10

njrat trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2