njrat | 3d712594beb830c4e1a70999007e43d69a93a16558a8724adb623b291dada35c | Triage

Sharing

General

Target

Server.exe
Size

93KB
Sample

250325-vzr7lstkw7
MD5

1ce6561ad4ee56e5e252f07cf5222a6c
SHA1

d29fc8a0a09baa730e8bb34189ac5b206f71b83a
SHA256

3d712594beb830c4e1a70999007e43d69a93a16558a8724adb623b291dada35c
SHA512

54ddb1405e2fbd1d3b1b09f52dd775fe077cc08cac26ab200913584c1f81f23cd20bebdcabdab105d842925102e871efaa898a029f19c3a817ec002e19d27100
SSDEEP

1536:iUwC+xhUa9urgOBPRNvM4jEwzGi1dDeDPgS:iUmUa9urgObdGi1dQo

Score

10^/10

njrat hacked defense_evasion discovery persistence privilege_escalation

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

september-idol.gl.at.ply.gg:60127

Mutex

a07ed3473b57c095d69710069d48f926

Attributes

reg_key
a07ed3473b57c095d69710069d48f926
splitter
|'|'|

Targets

- Target
  
  Server.exe
- Size
  
  93KB
- MD5
  
  1ce6561ad4ee56e5e252f07cf5222a6c
- SHA1
  
  d29fc8a0a09baa730e8bb34189ac5b206f71b83a
- SHA256
  
  3d712594beb830c4e1a70999007e43d69a93a16558a8724adb623b291dada35c
- SHA512
  
  54ddb1405e2fbd1d3b1b09f52dd775fe077cc08cac26ab200913584c1f81f23cd20bebdcabdab105d842925102e871efaa898a029f19c3a817ec002e19d27100
- SSDEEP
  
  1536:iUwC+xhUa9urgOBPRNvM4jEwzGi1dDeDPgS:iUmUa9urgObdGi1dQo
Score

8^/10

defense_evasion discovery persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation

behavioral2

defense_evasiondiscoverypersistenceprivilege_escalation