njrat | 40ad87dfeed9d6d5190e9a78e285d02e28562028eefcdb25595c90d53faed60d | Triage™

Login
Reports

Overview

overview

Static

static

40ad87dfee...0d.exe

windows10-2004-x64

40ad87dfee...0d.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
40ad87dfeed9d6d5190e9a78e285d02e28562028eefcdb25595c90d53faed60d.exe
Size 31KB
Sample251007-l8nfca1xfs
SHA256 40ad87dfeed9d6d5190e9a78e285d02e28562028eefcdb25595c90d53faed60d
MD5 b680f078f606059f3f7ddb5b7cff1121
SHA1 cbb3e7d4d9450fffc08fd3cf0e4ff54db1d41e68
SHA512 da953b8bb401463a9b4adbe4221404cfb2109061c94f464b76594dfc589869f50daae31ece9f242960aced01bd31874218b6f2de76432803692ac47b01ebb9f7
SSDEEP 768:Vfd6hcp9P3SzxdupgDBTrV1DvTDQmIDUu0tiKwj:ShQ6fpnQVkqj
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

njrat mybot defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

40ad87dfeed9d6d5190e9a78e285d02e28562028eefcdb25595c90d53faed60d.exe

Resource

win10v2004-20250610-en

windows10-2004-x64

7 signatures

150 seconds

defense_evasion discovery njrat persistence privilege_escalation trojan

Behavioral task

behavioral2

Sample

40ad87dfeed9d6d5190e9a78e285d02e28562028eefcdb25595c90d53faed60d.exe

Resource

win11-20250619-en

windows11-21h2-x64

7 signatures

150 seconds

defense_evasion discovery njrat persistence privilege_escalation trojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

offer-relationships.gl.at.ply.gg:8239

Mutex

9f4101800b653ebc133972b68f0917f4

Attributes

reg_key
9f4101800b653ebc133972b68f0917f4
splitter
Y262SUCZ4UJJ

Targets

- Target
  40ad87dfeed9d6d5190e9a78e285d02e28562028eefcdb25595c90d53faed60d.exe
- Size 31KB
- SHA256 40ad87dfeed9d6d5190e9a78e285d02e28562028eefcdb25595c90d53faed60d
- MD5 b680f078f606059f3f7ddb5b7cff1121
- SHA1 cbb3e7d4d9450fffc08fd3cf0e4ff54db1d41e68
- SHA512 da953b8bb401463a9b4adbe4221404cfb2109061c94f464b76594dfc589869f50daae31ece9f242960aced01bd31874218b6f2de76432803692ac47b01ebb9f7
- SSDEEP 768:Vfd6hcp9P3SzxdupgDBTrV1DvTDQmIDUu0tiKwj:ShQ6fpnQVkqj
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

defense_evasion discovery njrat persistence privilege_escalation trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan

behavioral2

defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan

© 2018-2026

Terms | Privacy