njrat | 90d5f8f3158c697ec8b512ced2139149f05004f5b2a32a3f34a5e9f83a263ad3 | Triage

Sharing

General

Target

337cabfce35dc84645dbad617b58a418.exe
Size

65KB
Sample

250128-srbtjsspfv
MD5

337cabfce35dc84645dbad617b58a418
SHA1

b383369938598e3d87dd5e854bcdebcfb9b021e3
SHA256

90d5f8f3158c697ec8b512ced2139149f05004f5b2a32a3f34a5e9f83a263ad3
SHA512

640b485b802d4f1ceb33eec70a0b5d29e873c7bd53eee1bfdcdf7b619f3dd81f8c3c5cb0fbb301f2554b9a07ccd80cd470cbdd145e5cd35d28c935bccd98a61d
SSDEEP

1536:TTQEsHKoN36tFQviFw1/A/5c+BnvbYfLteF3nLrB9z3n6aF9bCS9vM:TTQEsqoN36tFQviFCIBBnsfWl9zqaF9e

Score

10^/10

njrat hacked discovery

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

HacKed

C2

127.0.0.1:25606

Mutex

Client.exe

Attributes

reg_key
Client.exe
splitter
|Ghost|

Targets

- Target
  
  337cabfce35dc84645dbad617b58a418.exe
- Size
  
  65KB
- MD5
  
  337cabfce35dc84645dbad617b58a418
- SHA1
  
  b383369938598e3d87dd5e854bcdebcfb9b021e3
- SHA256
  
  90d5f8f3158c697ec8b512ced2139149f05004f5b2a32a3f34a5e9f83a263ad3
- SHA512
  
  640b485b802d4f1ceb33eec70a0b5d29e873c7bd53eee1bfdcdf7b619f3dd81f8c3c5cb0fbb301f2554b9a07ccd80cd470cbdd145e5cd35d28c935bccd98a61d
- SSDEEP
  
  1536:TTQEsHKoN36tFQviFw1/A/5c+BnvbYfLteF3nLrB9z3n6aF9bCS9vM:TTQEsqoN36tFQviFCIBBnsfWl9zqaF9e
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2