njrat | 3e356a29411ae2f9a8ca4019d58ca9ca71837b00c8587afbb5e3cad774ba7bc1 | Triage

Sharing

General

Target

3e356a29411ae2f9a8ca4019d58ca9ca71837b00c8587afbb5e3cad774ba7bc1.exe
Size

43KB
Sample

250301-c716daxses
MD5

e1a244c5d1491aad1902df514af314db
SHA1

5792f20685d9503b93ae07620911a9fc2cd5a7a6
SHA256

3e356a29411ae2f9a8ca4019d58ca9ca71837b00c8587afbb5e3cad774ba7bc1
SHA512

f07f143bde596cf2080a1240f721d96b0a2aeaeb0310700e95ab019d9506484fea6ca69a0408f0f821aa21c54b8caf5db02bab3338b374f3d8942ddb91270578
SSDEEP

384:fTZyf9lkteXivmGUyeSRCymw5EBxE1UE+zwIij+ZsNO3PlpJKkkjh/TzF7pWnuml:fdElkQyvdhe8Ce4E6uXQ/oTC+L

Score

10^/10

njrat hacked discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

quiet-cloud-77052.pktriot.net:22728

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  3e356a29411ae2f9a8ca4019d58ca9ca71837b00c8587afbb5e3cad774ba7bc1.exe
- Size
  
  43KB
- MD5
  
  e1a244c5d1491aad1902df514af314db
- SHA1
  
  5792f20685d9503b93ae07620911a9fc2cd5a7a6
- SHA256
  
  3e356a29411ae2f9a8ca4019d58ca9ca71837b00c8587afbb5e3cad774ba7bc1
- SHA512
  
  f07f143bde596cf2080a1240f721d96b0a2aeaeb0310700e95ab019d9506484fea6ca69a0408f0f821aa21c54b8caf5db02bab3338b374f3d8942ddb91270578
- SSDEEP
  
  384:fTZyf9lkteXivmGUyeSRCymw5EBxE1UE+zwIij+ZsNO3PlpJKkkjh/TzF7pWnuml:fdElkQyvdhe8Ce4E6uXQ/oTC+L
Score

10^/10

njrat hacked discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njrathackeddiscoverytrojan

behavioral2

njrathackeddiscoverytrojan