njrat | 31bf0b0d5120fa0a0977b15ab5d60cee583bef4df4ff41053ee7971c62f86383 | Triage

Sharing

General

Target

31bf0b0d5120fa0a0977b15ab5d60cee583bef4df4ff41053ee7971c62f86383N.exe
Size

23KB
Sample

241231-zrfaasyngx
MD5

603dc0534f4aeab38c641b6ac8702b50
SHA1

13a943bb49e25b2194a257f870827fb2fdfe8f16
SHA256

31bf0b0d5120fa0a0977b15ab5d60cee583bef4df4ff41053ee7971c62f86383
SHA512

e8ccca77c3c1c8e41c20d5e5a3ae3d36ce4e6e7eaa52eb41ab538b07526aff65c579f157db95a057cb547aa4d0ae9c4425e4046b26601b7cddca07910aad4489
SSDEEP

384:xT2x0W3qZN2ATtRGCfCo9D46BgnqUhL19mRvR6JZlbw8hqIusZzZ9Uu:uh+rdflRpcnuO

Score

10^/10

njrat hacked by lokn

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HaCkEd bY LoKn

C2

customers-edmonton.gl.at.ply.gg:28608

Mutex

5a0e6576524fad771bccf79eb40f7eca

Attributes

reg_key
5a0e6576524fad771bccf79eb40f7eca
splitter
|'|'|

Targets

- Target
  
  31bf0b0d5120fa0a0977b15ab5d60cee583bef4df4ff41053ee7971c62f86383N.exe
- Size
  
  23KB
- MD5
  
  603dc0534f4aeab38c641b6ac8702b50
- SHA1
  
  13a943bb49e25b2194a257f870827fb2fdfe8f16
- SHA256
  
  31bf0b0d5120fa0a0977b15ab5d60cee583bef4df4ff41053ee7971c62f86383
- SHA512
  
  e8ccca77c3c1c8e41c20d5e5a3ae3d36ce4e6e7eaa52eb41ab538b07526aff65c579f157db95a057cb547aa4d0ae9c4425e4046b26601b7cddca07910aad4489
- SSDEEP
  
  384:xT2x0W3qZN2ATtRGCfCo9D46BgnqUhL19mRvR6JZlbw8hqIusZzZ9Uu:uh+rdflRpcnuO
Score

1^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

hacked by loknnjrat

behavioral1

behavioral2