njrat | ec64e4c78aeb058bd4036d418ecb8e1acf64fec12ec6ca6b93bbf7123ca0a9f3 | Triage™

Login
Reports

Overview

overview

Static

static

ac74bff894...ed.exe

windows7-x64

ac74bff894...ed.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
ac74bff894fd9004248207a0800239ed.exe
Size 31KB
Sample250303-d24vrawjy4
SHA256 ec64e4c78aeb058bd4036d418ecb8e1acf64fec12ec6ca6b93bbf7123ca0a9f3
MD5 ac74bff894fd9004248207a0800239ed
SHA1 7295f2884c756dc9cbb09450f9aff8176dc08c2f
SHA512 26afca7375be73f3754cbde62e235a1feca98381702691cc58fa60f36deea802c31b4b1860b7a8bbd48a1327c29f3d22de9e08b33b28e306d45f00a152cf62fb
SSDEEP 768:tPaxirnp7VJMzxn6zQJyRm3dPlvyYQmIDUu0tiwZj:E0pKakJnQVkNj
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

njrat mybot defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

ac74bff894fd9004248207a0800239ed.exe

Resource

win7-20241010-en

windows7-x64

8 signatures

150 seconds

njrat defense_evasion discovery persistence privilege_escalation trojan

Behavioral task

behavioral2

Sample

ac74bff894fd9004248207a0800239ed.exe

Resource

win10v2004-20250217-en

windows10-2004-x64

8 signatures

150 seconds

njrat defense_evasion discovery persistence privilege_escalation trojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

173.45.117.247:6522

Mutex

92f434c830a6fefa83d7e94ad483524c

Attributes

reg_key
92f434c830a6fefa83d7e94ad483524c
splitter
Y262SUCZ4UJJ

Targets

- Target
  ac74bff894fd9004248207a0800239ed.exe
- Size 31KB
- SHA256 ec64e4c78aeb058bd4036d418ecb8e1acf64fec12ec6ca6b93bbf7123ca0a9f3
- MD5 ac74bff894fd9004248207a0800239ed
- SHA1 7295f2884c756dc9cbb09450f9aff8176dc08c2f
- SHA512 26afca7375be73f3754cbde62e235a1feca98381702691cc58fa60f36deea802c31b4b1860b7a8bbd48a1327c29f3d22de9e08b33b28e306d45f00a152cf62fb
- SSDEEP 768:tPaxirnp7VJMzxn6zQJyRm3dPlvyYQmIDUu0tiwZj:E0pKakJnQVkNj
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

njrat defense_evasion discovery persistence privilege_escalation trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  defense_evasion
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratdefense_evasiondiscoverypersistenceprivilege_escalationtrojan

behavioral2

njratdefense_evasiondiscoverypersistenceprivilege_escalationtrojan

© 2018-2026

Terms | Privacy