njrat | a401daf688acacc2c2b1967c8773728e1c15dfc391e2242e38223f43000beea7

General

Target

feqww.exe
Size

55KB
Sample

250125-kfknbavkhx
MD5

316157aa7a41bffb0bf75f88e436abe3
SHA1

f2f2bb14e22d3c711272c62f01d17ae24085e41e
SHA256

a401daf688acacc2c2b1967c8773728e1c15dfc391e2242e38223f43000beea7
SHA512

95f630a070948a4f403523c44c1a85253efb1c34cde3499d601beec98e4987d845e8d80b79065563b0ec52d76a64b31f2e5c7ee72aea11df5fac43e5058f8690
SSDEEP

1536:KWDM8Dn+QNoB4vZ9Vk7dwmuXKDCwsNMDGXExI3pmUm:FI8Dn+nWTVk7umuXKDCwsNMDGXExI3pm

Score

10^/10

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

F9t family

C2

pics-accessory.gl.at.ply.gg:16815

Mutex

3135d21b63440eb82b132374252e9d92

Attributes

reg_key
3135d21b63440eb82b132374252e9d92
splitter
Y262SUCZ4UJJ

Targets

- Target
  
  feqww.exe
- Size
  
  55KB
- MD5
  
  316157aa7a41bffb0bf75f88e436abe3
- SHA1
  
  f2f2bb14e22d3c711272c62f01d17ae24085e41e
- SHA256
  
  a401daf688acacc2c2b1967c8773728e1c15dfc391e2242e38223f43000beea7
- SHA512
  
  95f630a070948a4f403523c44c1a85253efb1c34cde3499d601beec98e4987d845e8d80b79065563b0ec52d76a64b31f2e5c7ee72aea11df5fac43e5058f8690
- SSDEEP
  
  1536:KWDM8Dn+QNoB4vZ9Vk7dwmuXKDCwsNMDGXExI3pmUm:FI8Dn+nWTVk7umuXKDCwsNMDGXExI3pm
Score

10^/10

njrat discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Njrat family

njRAT/Bladabindi

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2