njrat | 531f050ee8242282513d77d4d4efa91672640d20e9a3dc2fae9e70066e9c2eaa | Triage

Sharing

General

Target

531f050ee8242282513d77d4d4efa91672640d20e9a3dc2fae9e70066e9c2eaa
Size

44KB
Sample

250404-3hmvkawvez
MD5

2bf950d2612385691b7bd1a5a9283057
SHA1

b2e7c661fcc71af5c1901fb1db2a0c80c277e4d1
SHA256

531f050ee8242282513d77d4d4efa91672640d20e9a3dc2fae9e70066e9c2eaa
SHA512

6c9f9454734de9fa6bcdeb73d485d737717e5f9f2c0e3cd32fa5dc7e4abed9de23c61b672a6710a8b24a9e765761e089348066e2994611a3926e81859d02256d
SSDEEP

384:aZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:499nU4pEqt5tKhohuuXQ/oiC+L

Score

10^/10

njrat hacked discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:6754

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  531f050ee8242282513d77d4d4efa91672640d20e9a3dc2fae9e70066e9c2eaa
- Size
  
  44KB
- MD5
  
  2bf950d2612385691b7bd1a5a9283057
- SHA1
  
  b2e7c661fcc71af5c1901fb1db2a0c80c277e4d1
- SHA256
  
  531f050ee8242282513d77d4d4efa91672640d20e9a3dc2fae9e70066e9c2eaa
- SHA512
  
  6c9f9454734de9fa6bcdeb73d485d737717e5f9f2c0e3cd32fa5dc7e4abed9de23c61b672a6710a8b24a9e765761e089348066e2994611a3926e81859d02256d
- SSDEEP
  
  384:aZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:499nU4pEqt5tKhohuuXQ/oiC+L
Score

10^/10

njrat hacked discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njrathackeddiscoverytrojan