njrat | 99bb59596d4e7f5d9a9f5ca7bfd1f5b647fa9aeecc56a2c674c386247074313b | Triage

Sharing

General

Target

99bb59596d4e7f5d9a9f5ca7bfd1f5b647fa9aeecc56a2c674c386247074313b
Size

55KB
Sample

250404-3mbyvsyps3
MD5

486b731eb864a9391b2a3d5432319c54
SHA1

3b47b83fb4cef50508ff025ef35eb7d6d3f969c8
SHA256

99bb59596d4e7f5d9a9f5ca7bfd1f5b647fa9aeecc56a2c674c386247074313b
SHA512

ad5fc6d0356d3905c46731f4e34ae602b911e05e4633252eddafc988c4b838bd2d3a37cdc932d312c05b04c7c5d876124e9ce00e4c27a3ffd327b76707a0b015
SSDEEP

384:KZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:I99nU4pEqt5tKhohuuXQ/oiC+L

Score

10^/10

njrat hacked discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:6754

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  99bb59596d4e7f5d9a9f5ca7bfd1f5b647fa9aeecc56a2c674c386247074313b
- Size
  
  55KB
- MD5
  
  486b731eb864a9391b2a3d5432319c54
- SHA1
  
  3b47b83fb4cef50508ff025ef35eb7d6d3f969c8
- SHA256
  
  99bb59596d4e7f5d9a9f5ca7bfd1f5b647fa9aeecc56a2c674c386247074313b
- SHA512
  
  ad5fc6d0356d3905c46731f4e34ae602b911e05e4633252eddafc988c4b838bd2d3a37cdc932d312c05b04c7c5d876124e9ce00e4c27a3ffd327b76707a0b015
- SSDEEP
  
  384:KZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:I99nU4pEqt5tKhohuuXQ/oiC+L
Score

10^/10

njrat hacked discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njrathackeddiscoverytrojan