njrat | 0744496413d7e8c19236bf1961c55110c75f3ae960e3f7ab7e341d856eedac43 | Triage

Sharing

General

Target

0744496413d7e8c19236bf1961c55110c75f3ae960e3f7ab7e341d856eedac43
Size

43KB
Sample

250405-pp4vrswtfv
MD5

476d2ccafe3870913c52330a412f81c2
SHA1

1b54fe20f98a8acd8e3be25c66d001ee5d5cd9e4
SHA256

0744496413d7e8c19236bf1961c55110c75f3ae960e3f7ab7e341d856eedac43
SHA512

ff81f0c01b3669adc6dedeefac8c259f9d7ad9dd41de4945667fa7c71b593265ef2492d661f3d1f887fd357813940d62099da579e1ffb934bddcb449f1e5fb2e
SSDEEP

384:xZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:j99nU4pEqt5tKhohuuXQ/oiC+L

Score

10^/10

njrat hacked discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:6754

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  0744496413d7e8c19236bf1961c55110c75f3ae960e3f7ab7e341d856eedac43
- Size
  
  43KB
- MD5
  
  476d2ccafe3870913c52330a412f81c2
- SHA1
  
  1b54fe20f98a8acd8e3be25c66d001ee5d5cd9e4
- SHA256
  
  0744496413d7e8c19236bf1961c55110c75f3ae960e3f7ab7e341d856eedac43
- SHA512
  
  ff81f0c01b3669adc6dedeefac8c259f9d7ad9dd41de4945667fa7c71b593265ef2492d661f3d1f887fd357813940d62099da579e1ffb934bddcb449f1e5fb2e
- SSDEEP
  
  384:xZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:j99nU4pEqt5tKhohuuXQ/oiC+L
Score

10^/10

njrat hacked discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njrathackeddiscoverytrojan