njrat | 4088ab627e6c5ddb085e2c2e256e4e94d2cc51f5bd31ee01cd6e195fd3c26a23 | Triage

Sharing

General

Target

4088ab627e6c5ddb085e2c2e256e4e94d2cc51f5bd31ee01cd6e195fd3c26a23
Size

43KB
Sample

250405-t9rhdsssax
MD5

0122de50623c1d14a05f4f5acb81ac58
SHA1

83277b3119168a8417797119aa9c17b5a79b781a
SHA256

4088ab627e6c5ddb085e2c2e256e4e94d2cc51f5bd31ee01cd6e195fd3c26a23
SHA512

082df95de909c3304448b6e8aa95320ec0eb335772a3f0b65655d602e33b9ea7b9e1ff00eec971edac181ecc50bcb7bfbd83085583ed150fe75b03df6b8d0dad
SSDEEP

384:eZy+Hl9n1iDcsyEqt3ptvwcsECGgOE3zcQij2Z2NO3PlpJKkkjh/TzF7pWnPmgX7:k99nU4pEqt5tvt7gfu9Q/oi7+L

Score

10^/10

njrat hacked discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:6754

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  4088ab627e6c5ddb085e2c2e256e4e94d2cc51f5bd31ee01cd6e195fd3c26a23
- Size
  
  43KB
- MD5
  
  0122de50623c1d14a05f4f5acb81ac58
- SHA1
  
  83277b3119168a8417797119aa9c17b5a79b781a
- SHA256
  
  4088ab627e6c5ddb085e2c2e256e4e94d2cc51f5bd31ee01cd6e195fd3c26a23
- SHA512
  
  082df95de909c3304448b6e8aa95320ec0eb335772a3f0b65655d602e33b9ea7b9e1ff00eec971edac181ecc50bcb7bfbd83085583ed150fe75b03df6b8d0dad
- SSDEEP
  
  384:eZy+Hl9n1iDcsyEqt3ptvwcsECGgOE3zcQij2Z2NO3PlpJKkkjh/TzF7pWnPmgX7:k99nU4pEqt5tvt7gfu9Q/oi7+L
Score

10^/10

njrat hacked discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njrathackeddiscoverytrojan