njrat | 64c93155b6cf5a50486c058a37922d7795eb4476e2f7c233b3006383569527ef | Triage

Sharing

General

Target

64c93155b6cf5a50486c058a37922d7795eb4476e2f7c233b3006383569527ef.exe
Size

93KB
Sample

250111-yczjyszkhj
MD5

023d18d506be16f8eb04fa6d5466a82f
SHA1

e8395d02d731b07c91e7b17a1d661f394e7fb774
SHA256

64c93155b6cf5a50486c058a37922d7795eb4476e2f7c233b3006383569527ef
SHA512

4c4c5ea4893b8a06598f157cf85e6268d1db7e2d1456ecb54d303ad075e1517ac96859a8ef9920221bb72fe1e5dab95201fc8d1b14669e3294e0552bb91ff4d3
SSDEEP

1536:Ox4FQWqkqqoLc2m+iIjEwzGi1dDqD3gSx:Ox4mkqqoA2xi5i1dkwC

Score

10^/10

njrat lunacy pc cracked by ctrik discovery evasion persistence privilege_escalation

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Lunacy PC cracked by ctrik

C2

hakim32.ddns.net:2000

127.0.0.1:5552

Mutex

da2a3455f965bc0fe872e09e43abac66

Attributes

reg_key
da2a3455f965bc0fe872e09e43abac66
splitter
|'|'|

Targets

- Target
  
  64c93155b6cf5a50486c058a37922d7795eb4476e2f7c233b3006383569527ef.exe
- Size
  
  93KB
- MD5
  
  023d18d506be16f8eb04fa6d5466a82f
- SHA1
  
  e8395d02d731b07c91e7b17a1d661f394e7fb774
- SHA256
  
  64c93155b6cf5a50486c058a37922d7795eb4476e2f7c233b3006383569527ef
- SHA512
  
  4c4c5ea4893b8a06598f157cf85e6268d1db7e2d1456ecb54d303ad075e1517ac96859a8ef9920221bb72fe1e5dab95201fc8d1b14669e3294e0552bb91ff4d3
- SSDEEP
  
  1536:Ox4FQWqkqqoLc2m+iIjEwzGi1dDqD3gSx:Ox4mkqqoA2xi5i1dkwC
Score

8^/10

discovery evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

lunacy pc cracked by ctriknjrat

behavioral1

discoveryevasionpersistenceprivilege_escalation

behavioral2

discoveryevasionpersistenceprivilege_escalation