njrat | 4cffd51833e0076528fdc7051974859158ab21f9292e0fea343b80828c17e6b6 | Triage

Sharing

General

Target

4cffd51833e0076528fdc7051974859158ab21f9292e0fea343b80828c17e6b6
Size

55KB
Sample

250405-szwtpatk13
MD5

a5d94359f8bdf538815971044bda3e4d
SHA1

b21f92282ebfdc57f7430b58ad49755bb17e613b
SHA256

4cffd51833e0076528fdc7051974859158ab21f9292e0fea343b80828c17e6b6
SHA512

2196c2b09aead55ca8472567564236124ec83bd2f79aa0ea1293194f0a8246960f4335e7bf1030c83f056396e32dc6c2dc030517ba1be5697dc64082a048f94a
SSDEEP

384:DZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:t99nU4pEqt5tKhohuuXQ/oiC+L

Score

10^/10

njrat hacked discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:6754

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  4cffd51833e0076528fdc7051974859158ab21f9292e0fea343b80828c17e6b6
- Size
  
  55KB
- MD5
  
  a5d94359f8bdf538815971044bda3e4d
- SHA1
  
  b21f92282ebfdc57f7430b58ad49755bb17e613b
- SHA256
  
  4cffd51833e0076528fdc7051974859158ab21f9292e0fea343b80828c17e6b6
- SHA512
  
  2196c2b09aead55ca8472567564236124ec83bd2f79aa0ea1293194f0a8246960f4335e7bf1030c83f056396e32dc6c2dc030517ba1be5697dc64082a048f94a
- SSDEEP
  
  384:DZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:t99nU4pEqt5tKhohuuXQ/oiC+L
Score

10^/10

njrat hacked discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njrathackeddiscoverytrojan