njrat | b8c1d716644ad7a4c7c1c4bb993375fda3c7a166242b08174a1836889ac6f0a4 | Triage

Sharing

General

Target

b8c1d716644ad7a4c7c1c4bb993375fda3c7a166242b08174a1836889ac6f0a4
Size

47KB
Sample

250405-sz5rlatk17
MD5

9197f43828bd5f4a0cf7496d112a7d4c
SHA1

70896928b0b2b9377d6658b9d8ac2302f05226ea
SHA256

b8c1d716644ad7a4c7c1c4bb993375fda3c7a166242b08174a1836889ac6f0a4
SHA512

2d3f16d453b73bd71e7d97fceb30c15469871c8ba8a20d7d2c91a70beccc581955d66e99e0a5e636102f58791c11f5fdc1bf23768cbc49cc0d9c1b22edd3bbfc
SSDEEP

384:KZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:I99nU4pEqt5tKhohuuXQ/oiC+L8n

Score

10^/10

njrat hacked discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:6754

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  b8c1d716644ad7a4c7c1c4bb993375fda3c7a166242b08174a1836889ac6f0a4
- Size
  
  47KB
- MD5
  
  9197f43828bd5f4a0cf7496d112a7d4c
- SHA1
  
  70896928b0b2b9377d6658b9d8ac2302f05226ea
- SHA256
  
  b8c1d716644ad7a4c7c1c4bb993375fda3c7a166242b08174a1836889ac6f0a4
- SHA512
  
  2d3f16d453b73bd71e7d97fceb30c15469871c8ba8a20d7d2c91a70beccc581955d66e99e0a5e636102f58791c11f5fdc1bf23768cbc49cc0d9c1b22edd3bbfc
- SSDEEP
  
  384:KZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:I99nU4pEqt5tKhohuuXQ/oiC+L8n
Score

10^/10

njrat hacked discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njrathackeddiscoverytrojan