njrat | 09b7588015dd2ef2eacfda7a9fcb05f342e641a7a200a5bbedd89c9e5e5afdeb | Triage

Sharing

General

Target

09b7588015dd2ef2eacfda7a9fcb05f342e641a7a200a5bbedd89c9e5e5afdeb
Size

45KB
Sample

250405-e3bq2asnt9
MD5

146d85c116061a0bdaab0d57a883eeb9
SHA1

633bb785cb24be6fc82aaea2ffb14705cf04df3e
SHA256

09b7588015dd2ef2eacfda7a9fcb05f342e641a7a200a5bbedd89c9e5e5afdeb
SHA512

757207eae52d94b2dd239a2f969ed594e654d47608267c852cae817c39fd3081a4cbdae80993a486393e0a03d791443b65f351f4b6a6fe11c86fbea24311ca54
SSDEEP

384:NvVuGnLZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pX:hTnl99nU4pEqt5tKhohuuXQ/oiC+L

Score

10^/10

njrat hacked discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:6754

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  09b7588015dd2ef2eacfda7a9fcb05f342e641a7a200a5bbedd89c9e5e5afdeb
- Size
  
  45KB
- MD5
  
  146d85c116061a0bdaab0d57a883eeb9
- SHA1
  
  633bb785cb24be6fc82aaea2ffb14705cf04df3e
- SHA256
  
  09b7588015dd2ef2eacfda7a9fcb05f342e641a7a200a5bbedd89c9e5e5afdeb
- SHA512
  
  757207eae52d94b2dd239a2f969ed594e654d47608267c852cae817c39fd3081a4cbdae80993a486393e0a03d791443b65f351f4b6a6fe11c86fbea24311ca54
- SSDEEP
  
  384:NvVuGnLZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pX:hTnl99nU4pEqt5tKhohuuXQ/oiC+L
Score

10^/10

njrat hacked discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njrathackeddiscoverytrojan