njrat | 3240cb1336eb2eee722ec8b2699b8b4b08647c90db9adf9250aa4b95e2b459d1 | Triage

Sharing

General

Target

3240cb1336eb2eee722ec8b2699b8b4b08647c90db9adf9250aa4b95e2b459d1
Size

43KB
Sample

250405-rsplcsyygt
MD5

8806c486b69345531773b186819405c5
SHA1

c2603d1af33be1101090ffeead3d4285301ba314
SHA256

3240cb1336eb2eee722ec8b2699b8b4b08647c90db9adf9250aa4b95e2b459d1
SHA512

c7f6c16899d4e64ed1eb859fbf78ddfea836429913cbf72496f1a186a7d3eca474f62a150b064920349a2db695ae820c145180dd940afc8167432c0e5b948435
SSDEEP

384:tZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:H99nU4pEqt5tKhohuuXQ/oiC+L

Score

10^/10

njrat hacked discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:6754

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  3240cb1336eb2eee722ec8b2699b8b4b08647c90db9adf9250aa4b95e2b459d1
- Size
  
  43KB
- MD5
  
  8806c486b69345531773b186819405c5
- SHA1
  
  c2603d1af33be1101090ffeead3d4285301ba314
- SHA256
  
  3240cb1336eb2eee722ec8b2699b8b4b08647c90db9adf9250aa4b95e2b459d1
- SHA512
  
  c7f6c16899d4e64ed1eb859fbf78ddfea836429913cbf72496f1a186a7d3eca474f62a150b064920349a2db695ae820c145180dd940afc8167432c0e5b948435
- SSDEEP
  
  384:tZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:H99nU4pEqt5tKhohuuXQ/oiC+L
Score

10^/10

njrat hacked discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njrathackeddiscoverytrojan