njrat | ee42ce5868a39e9279bebb8b70bece98a013dfcaf87ac473dec4d41a9ee7f579 | Triage

Sharing

General

Target

ee42ce5868a39e9279bebb8b70bece98a013dfcaf87ac473dec4d41a9ee7f579
Size

44KB
Sample

250405-hfhgvavnz4
MD5

e313fcdc575494a165233914461a56c2
SHA1

b46d46f7b8b38f3df027a79683e2fd4521346247
SHA256

ee42ce5868a39e9279bebb8b70bece98a013dfcaf87ac473dec4d41a9ee7f579
SHA512

0d74d49aecdb8a7281e30937dabd9b223c4aacecfc902adac6ac4fda2af8c493b0404a68a3e5277b0bc7ba89031f85d94a1ebc6642df6a0266f409fefe5864b1
SSDEEP

384:DZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:t99nU4pEqt5tKhohuuXQ/oiC+L

Score

10^/10

njrat hacked discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:6754

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  ee42ce5868a39e9279bebb8b70bece98a013dfcaf87ac473dec4d41a9ee7f579
- Size
  
  44KB
- MD5
  
  e313fcdc575494a165233914461a56c2
- SHA1
  
  b46d46f7b8b38f3df027a79683e2fd4521346247
- SHA256
  
  ee42ce5868a39e9279bebb8b70bece98a013dfcaf87ac473dec4d41a9ee7f579
- SHA512
  
  0d74d49aecdb8a7281e30937dabd9b223c4aacecfc902adac6ac4fda2af8c493b0404a68a3e5277b0bc7ba89031f85d94a1ebc6642df6a0266f409fefe5864b1
- SSDEEP
  
  384:DZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:t99nU4pEqt5tKhohuuXQ/oiC+L
Score

10^/10

njrat hacked discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njrathackeddiscoverytrojan