Overview

overview

10

Static

static

5

2026-05-22...er.exe

windows10-2004-x64

10

2026-05-22...er.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-05-22_33db4c0a1002785329f6acb0c14eecc6_agent-tesla_darkgate_elex_hawkeye_maze_remcos_xloader
  • Size 883KB
  • Sample260522-ter6faa17y
  • SHA256 314382157df10fbbf7155e51b369814da3a520d06848dc1133774fc4702e50bd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
njrat14 mai generateur xboxdefense_evasiondiscoverypersistenceprivilege_escalationtrojan

Malware Config

Extracted

Family

  • njrat

Version

  • 0.7d

Botnet

  • 14 mai generateur xbox

C2

  • 89.94.35.57:1604

Mutex

  • ef05e501c2e286164abf5fcaa961559f

Attributes
  • reg_key

    ef05e501c2e286164abf5fcaa961559f

  • splitter

    |'|'|

Targets

    • Target
      2026-05-22_33db4c0a1002785329f6acb0c14eecc6_agent-tesla_darkgate_elex_hawkeye_maze_remcos_xloader
    • Size 883KB
    • SHA256 314382157df10fbbf7155e51b369814da3a520d06848dc1133774fc4702e50bd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    14 mai generateur xboxdefense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan

    • Family: njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Modifies Windows Firewall

      defense_evasion

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks