njrat | 3bc17e8d5b3b54f8fef7421b117521870fd7ac91adfee7f45d14d46b9093a83c | Triage

Sharing

General

Target

3bc17e8d5b3b54f8fef7421b117521870fd7ac91adfee7f45d14d46b9093a83c
Size

43KB
Sample

250405-pvatwaypx9
MD5

7a34ba0b9dc7e4abc71127881142c73c
SHA1

1a2e207d011f2b72fa7fb29f3268e9b1d48bf49d
SHA256

3bc17e8d5b3b54f8fef7421b117521870fd7ac91adfee7f45d14d46b9093a83c
SHA512

0dd8e39e2ac86be8b16c2ea276c5123ea8ddea5aa8b6bb3a83e2cb4e88369ca5db4f1797e20f1ed789538adbe25fca01875d6c6008cb6a681291c5a8d5c805c7
SSDEEP

384:jZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgry:N99nU4pEqt5tKhohuuXQ/oiC+Ld7S

Score

10^/10

njrat hacked discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:6754

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  3bc17e8d5b3b54f8fef7421b117521870fd7ac91adfee7f45d14d46b9093a83c
- Size
  
  43KB
- MD5
  
  7a34ba0b9dc7e4abc71127881142c73c
- SHA1
  
  1a2e207d011f2b72fa7fb29f3268e9b1d48bf49d
- SHA256
  
  3bc17e8d5b3b54f8fef7421b117521870fd7ac91adfee7f45d14d46b9093a83c
- SHA512
  
  0dd8e39e2ac86be8b16c2ea276c5123ea8ddea5aa8b6bb3a83e2cb4e88369ca5db4f1797e20f1ed789538adbe25fca01875d6c6008cb6a681291c5a8d5c805c7
- SSDEEP
  
  384:jZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgry:N99nU4pEqt5tKhohuuXQ/oiC+Ld7S
Score

10^/10

njrat hacked discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njrathackeddiscoverytrojan