njrat | 239f8ee37ff56230ece8b50161673626c860f58ae099b1fc60f6c73ebc8d5e4a | Triage

Sharing

General

Target

JaffaCakes118_6c9ea48a1adacdda5e81cb681def0ff0
Size

254KB
Sample

250103-pmm48stmav
MD5

6c9ea48a1adacdda5e81cb681def0ff0
SHA1

3b39e2605030d367607eb05b8a9f659c4ec800f1
SHA256

239f8ee37ff56230ece8b50161673626c860f58ae099b1fc60f6c73ebc8d5e4a
SHA512

92e385b17fee687ee801e45ac62c64080b3c47caf7fff1792aa0cfb8749012918a47d8d804c63c8547f46d0f72d01e744da390ff871ffb3016eb8b84ded89109
SSDEEP

6144:vSdmouW951HZDeXGGOhz8gEhnzeENxunCPL:vnE95VZDgOhuhz1NxBP

Score

10^/10

njrat trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_6c9ea48a1adacdda5e81cb681def0ff0
- Size
  
  254KB
- MD5
  
  6c9ea48a1adacdda5e81cb681def0ff0
- SHA1
  
  3b39e2605030d367607eb05b8a9f659c4ec800f1
- SHA256
  
  239f8ee37ff56230ece8b50161673626c860f58ae099b1fc60f6c73ebc8d5e4a
- SHA512
  
  92e385b17fee687ee801e45ac62c64080b3c47caf7fff1792aa0cfb8749012918a47d8d804c63c8547f46d0f72d01e744da390ff871ffb3016eb8b84ded89109
- SSDEEP
  
  6144:vSdmouW951HZDeXGGOhz8gEhnzeENxunCPL:vnE95VZDgOhuhz1NxBP
Score

10^/10

njrat trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2