njrat | 01eb748d8c16ed6115e3a575eab7e28ab4d55ca9b6bb2aeb97239cef11d93b39 | Triage

Sharing

General

Target

01eb748d8c16ed6115e3a575eab7e28ab4d55ca9b6bb2aeb97239cef11d93b39.exe
Size

85KB
Sample

250225-bkg9ba1lw8
MD5

c9872b44d9ad4d7257e52d3a3d6d50d2
SHA1

1c17f72fe5f55cb1612b65d0e9d112dd839df170
SHA256

01eb748d8c16ed6115e3a575eab7e28ab4d55ca9b6bb2aeb97239cef11d93b39
SHA512

f6afd3a7a9abcff4b4065cf6f2cd19fdc9d9e03ba65f7461d5dac8e561e99daee1449702ad04332133e102c47bbc41b9d8dd86060c970ae9257fdac13b9e90ca
SSDEEP

1536:MHKOtYWs+CUuw9m9ELAAijeGQ7zzTruIzkIhlQJppcRiAdKIqmAVHwCfjQ6Si:jjWs+J9ca9iiD7fTiIzk6IwqmewK3

Score

10^/10

njrat defense_evasion discovery persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  01eb748d8c16ed6115e3a575eab7e28ab4d55ca9b6bb2aeb97239cef11d93b39.exe
- Size
  
  85KB
- MD5
  
  c9872b44d9ad4d7257e52d3a3d6d50d2
- SHA1
  
  1c17f72fe5f55cb1612b65d0e9d112dd839df170
- SHA256
  
  01eb748d8c16ed6115e3a575eab7e28ab4d55ca9b6bb2aeb97239cef11d93b39
- SHA512
  
  f6afd3a7a9abcff4b4065cf6f2cd19fdc9d9e03ba65f7461d5dac8e561e99daee1449702ad04332133e102c47bbc41b9d8dd86060c970ae9257fdac13b9e90ca
- SSDEEP
  
  1536:MHKOtYWs+CUuw9m9ELAAijeGQ7zzTruIzkIhlQJppcRiAdKIqmAVHwCfjQ6Si:jjWs+J9ca9iiD7fTiIzk6IwqmewK3
Score

10^/10

njrat defense_evasion discovery persistence privilege_escalation trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratdefense_evasiondiscoverypersistenceprivilege_escalationtrojan

behavioral2

njratdefense_evasiondiscoverypersistenceprivilege_escalationtrojan