njrat | 4160cb40509ff8d695b3a0c5f05fe83ab0b713036aa864504af1050b9253ad48 | Triage

Sharing

General

Target

Sigmanly_4160cb40509ff8d695b3a0c5f05fe83ab0b713036aa864504af1050b9253ad48
Size

43KB
Sample

250107-pnjhfa1lhs
MD5

587b41a4b882a71a5e8e1ed72f9514a1
SHA1

274674cac5c4dbb17f84c8b8c26a741e424d89f5
SHA256

4160cb40509ff8d695b3a0c5f05fe83ab0b713036aa864504af1050b9253ad48
SHA512

b484eda2e07c878fb85778aabf8c53619a407024d20cc6837994418b0500366e7f8f668a7547f6c944488611d6696eb3a3624cc2a5f74df9827a956c525c42d4
SSDEEP

384:TZyGRFAJ2HytDU6jDgwMMzio8qpuu9D9O5UE5QzwBlpJNakkjh/TzF7pWnDmgre/:d32oStgI0Y+zq8vQO+au+L

Score

10^/10

njrat hacked discovery

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

run-motherboard.gl.at.ply.gg:34002

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  Sigmanly_4160cb40509ff8d695b3a0c5f05fe83ab0b713036aa864504af1050b9253ad48
- Size
  
  43KB
- MD5
  
  587b41a4b882a71a5e8e1ed72f9514a1
- SHA1
  
  274674cac5c4dbb17f84c8b8c26a741e424d89f5
- SHA256
  
  4160cb40509ff8d695b3a0c5f05fe83ab0b713036aa864504af1050b9253ad48
- SHA512
  
  b484eda2e07c878fb85778aabf8c53619a407024d20cc6837994418b0500366e7f8f668a7547f6c944488611d6696eb3a3624cc2a5f74df9827a956c525c42d4
- SSDEEP
  
  384:TZyGRFAJ2HytDU6jDgwMMzio8qpuu9D9O5UE5QzwBlpJNakkjh/TzF7pWnDmgre/:d32oStgI0Y+zq8vQO+au+L
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2