njrat | 29d75037536856471105669f9ddb32362bd9b319c03cce30e88648700c816b12 | Triage

Sharing

General

Target

29d75037536856471105669f9ddb32362bd9b319c03cce30e88648700c816b12N.exe
Size

43KB
Sample

250125-qabfcavqgr
MD5

f3c6a39bbcdf14222e36ac9fcb1764c0
SHA1

52d80a72eaefd786e069e888b11c6d7bd8c4ce97
SHA256

29d75037536856471105669f9ddb32362bd9b319c03cce30e88648700c816b12
SHA512

a43e887a4033c0aa580af5c92afa9698b6b7f3d1b7aeae88a4ddb3cd741588c34c2160bfe35b19d39a1b901c76e2c9970297e7947386b6190777f272e876315b
SSDEEP

384:1ZyLaNU1SoycwJepJ3WhYYWOVOKEbv5Y8Gzz0Iij+ZsNO3PlpJKkkjh/TzF7pWnx:fJqglcwJEDMOtBY/uXQ/o2+L

Score

10^/10

njrat roshaders discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

RoShaders

C2

127.0.0.1:8848

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  29d75037536856471105669f9ddb32362bd9b319c03cce30e88648700c816b12N.exe
- Size
  
  43KB
- MD5
  
  f3c6a39bbcdf14222e36ac9fcb1764c0
- SHA1
  
  52d80a72eaefd786e069e888b11c6d7bd8c4ce97
- SHA256
  
  29d75037536856471105669f9ddb32362bd9b319c03cce30e88648700c816b12
- SHA512
  
  a43e887a4033c0aa580af5c92afa9698b6b7f3d1b7aeae88a4ddb3cd741588c34c2160bfe35b19d39a1b901c76e2c9970297e7947386b6190777f272e876315b
- SSDEEP
  
  384:1ZyLaNU1SoycwJepJ3WhYYWOVOKEbv5Y8Gzz0Iij+ZsNO3PlpJKkkjh/TzF7pWnx:fJqglcwJEDMOtBY/uXQ/o2+L
Score

10^/10

njrat roshaders discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratroshadersdiscoverytrojan

behavioral2

njratroshadersdiscoverytrojan