njrat | bf1c6304d671fd45287e1cae7bf92347248ad96ae1eaef85dd40dc8bafa3c3c4 | Triage

Sharing

General

Target

bf1c6304d671fd45287e1cae7bf92347248ad96ae1eaef85dd40dc8bafa3c3c4
Size

43KB
Sample

250405-yemyyatyg1
MD5

fcbfbd6643f198e674be999897cd23ff
SHA1

6ee0e7754764ed96943209810eaaf678ce997b80
SHA256

bf1c6304d671fd45287e1cae7bf92347248ad96ae1eaef85dd40dc8bafa3c3c4
SHA512

a0c5a896a232e92139f2c8548da19e9856469b9b4231bd31daada1fd539c3058460c04951739cd5c084f4f68a2c8917793e2aa958a5cbb0c95d863486928e99a
SSDEEP

384:BZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:T99nU4pEqt5tKhohuuXQ/oiC+L

Score

10^/10

njrat hacked discovery trojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:6754

Mutex

Windows Update

Attributes

reg_key
Windows Update
splitter
|Hassan|

Targets

- Target
  
  bf1c6304d671fd45287e1cae7bf92347248ad96ae1eaef85dd40dc8bafa3c3c4
- Size
  
  43KB
- MD5
  
  fcbfbd6643f198e674be999897cd23ff
- SHA1
  
  6ee0e7754764ed96943209810eaaf678ce997b80
- SHA256
  
  bf1c6304d671fd45287e1cae7bf92347248ad96ae1eaef85dd40dc8bafa3c3c4
- SHA512
  
  a0c5a896a232e92139f2c8548da19e9856469b9b4231bd31daada1fd539c3058460c04951739cd5c084f4f68a2c8917793e2aa958a5cbb0c95d863486928e99a
- SSDEEP
  
  384:BZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWnPmgra:T99nU4pEqt5tKhohuuXQ/oiC+L
Score

10^/10

njrat hacked discovery trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njrathackeddiscoverytrojan