njrat | 4019c10248e184a987eae86ee66d123e47ef5668ead0debecbefd6606c33980c | Triage

Sharing

General

Target

4019c10248e184a987eae86ee66d123e47ef5668ead0debecbefd6606c33980c.exe
Size

47KB
Sample

250405-kqlclawn17
MD5

d0ee21830e3e657ef943b8ff89d3d913
SHA1

6d55f462ebcee6af0bb429d409793f9b576c9e83
SHA256

4019c10248e184a987eae86ee66d123e47ef5668ead0debecbefd6606c33980c
SHA512

38a55a99e00175b25cb8c3bc4a3daea84f5ba7c8168f3e87e6551e16ff702b05ec9808dce11ae5974dd96847e9b2e94d089f67bc9bef1c0e246c3c1812d218c1
SSDEEP

768:N99nU4pEqt5tKhohuuXQ/oiC+LrX/QlL5:NDUnUtKhauuXQQiCMrCt

Score

10^/10

njrat hacked discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:6754

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  4019c10248e184a987eae86ee66d123e47ef5668ead0debecbefd6606c33980c.exe
- Size
  
  47KB
- MD5
  
  d0ee21830e3e657ef943b8ff89d3d913
- SHA1
  
  6d55f462ebcee6af0bb429d409793f9b576c9e83
- SHA256
  
  4019c10248e184a987eae86ee66d123e47ef5668ead0debecbefd6606c33980c
- SHA512
  
  38a55a99e00175b25cb8c3bc4a3daea84f5ba7c8168f3e87e6551e16ff702b05ec9808dce11ae5974dd96847e9b2e94d089f67bc9bef1c0e246c3c1812d218c1
- SSDEEP
  
  768:N99nU4pEqt5tKhohuuXQ/oiC+LrX/QlL5:NDUnUtKhauuXQQiCMrCt
Score

10^/10

njrat hacked discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njrathackeddiscoverytrojan