njrat | 72c3f03e71d0746b425548657f52418048bc2ac50dee2dbd2f3f31de963870b8 | Triage

Sharing

General

Target

72c3f03e71d0746b425548657f52418048bc2ac50dee2dbd2f3f31de963870b8
Size

45KB
Sample

250405-q35vna1js9
MD5

47a920473a038dfd7ebf172690919024
SHA1

8f7bccf49cbe336c0171c32af4c0729bcd4f9354
SHA256

72c3f03e71d0746b425548657f52418048bc2ac50dee2dbd2f3f31de963870b8
SHA512

1e4d662ff653dabded8c4c83179127eb26b6dfbafb1c09916f35e096f7b0ff0b46c39587a72845c47df864d2693d18ce36f013899b731db97180868165710458
SSDEEP

384:PSqM3PyE8qZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/Tzf:NMfyo99nU4pEqt5tKhohuuXQ/oiC+L

Score

10^/10

njrat hacked discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:6754

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  72c3f03e71d0746b425548657f52418048bc2ac50dee2dbd2f3f31de963870b8
- Size
  
  45KB
- MD5
  
  47a920473a038dfd7ebf172690919024
- SHA1
  
  8f7bccf49cbe336c0171c32af4c0729bcd4f9354
- SHA256
  
  72c3f03e71d0746b425548657f52418048bc2ac50dee2dbd2f3f31de963870b8
- SHA512
  
  1e4d662ff653dabded8c4c83179127eb26b6dfbafb1c09916f35e096f7b0ff0b46c39587a72845c47df864d2693d18ce36f013899b731db97180868165710458
- SSDEEP
  
  384:PSqM3PyE8qZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/Tzf:NMfyo99nU4pEqt5tKhohuuXQ/oiC+L
Score

10^/10

njrat hacked discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njrathackeddiscoverytrojan