njrat | d01ff0c02302be3b05a7bbf6251252e81ad3c26bb9ee24b0a43d7e5aa28c77dd | Triage

Sharing

General

Target

Server.exe
Size

93KB
Sample

250206-hmwm2swpas
MD5

357d842cf97d0f8f8c381c9f39d7e0d5
SHA1

490bf014def2fa4bba95484bd4516641c60349df
SHA256

d01ff0c02302be3b05a7bbf6251252e81ad3c26bb9ee24b0a43d7e5aa28c77dd
SHA512

abc1c638ade2982b7a825645a02d62dd5db283c39b134db2d41ebbb6f6236902f515b6b0b6e9c9228f640c7f7b42a39814e8a231f0e5284d550440c4a224fd35
SSDEEP

768:HY33UnD9O/pBcxYsbae6GIXb9pDX2t98PL0OXLeuXxrjEtCdnl2pi1Rz4Rk3LsG0:OUxOx6baIa9RZj00ljEwzGi1dDXD2gS

Score

10^/10

njrat hacked defense_evasion discovery persistence privilege_escalation

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

127.0.0.1:5552

Mutex

90cdc4299e3838b5249c33e1c7a2dd25

Attributes

reg_key
90cdc4299e3838b5249c33e1c7a2dd25
splitter
|'|'|

Targets

- Target
  
  Server.exe
- Size
  
  93KB
- MD5
  
  357d842cf97d0f8f8c381c9f39d7e0d5
- SHA1
  
  490bf014def2fa4bba95484bd4516641c60349df
- SHA256
  
  d01ff0c02302be3b05a7bbf6251252e81ad3c26bb9ee24b0a43d7e5aa28c77dd
- SHA512
  
  abc1c638ade2982b7a825645a02d62dd5db283c39b134db2d41ebbb6f6236902f515b6b0b6e9c9228f640c7f7b42a39814e8a231f0e5284d550440c4a224fd35
- SSDEEP
  
  768:HY33UnD9O/pBcxYsbae6GIXb9pDX2t98PL0OXLeuXxrjEtCdnl2pi1Rz4Rk3LsG0:OUxOx6baIa9RZj00ljEwzGi1dDXD2gS
Score

8^/10

defense_evasion discovery persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation