njrat | 1086e2ec8e9274e1639f14084f27d3b47e606c37ccc2a1e4976db6633ef797d5 | Triage™

Login
Reports

Overview

overview

Static

static

Server.exe

windows10-2004-x64

8

Server.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
Server.exe
Size 37KB
Sample260629-xeef5acx5t
SHA256 1086e2ec8e9274e1639f14084f27d3b47e606c37ccc2a1e4976db6633ef797d5
MD5 2f61cb4b14e0cf839a4a823eceea88e9
SHA1 5bc1696dec9c0d82be4ff8910a7ae7c217e9e40e
SHA512 ec941f09701d4b590777637262a1ea78e816b5121fae483848ad16a8e88460a1399da700f024c81aa0bcf8eb6608d66505bba47047ec63adf0e99268002d1534
SSDEEP 384:VaDvkit2Zf5W9cTYXyc/lPM20zHFmnPuskrAF+rMRTyN/0L+EcoinblneHQM3ep4:kDqjjTYic/lkEPuprM+rMRa8NuSRt
TLSH
T1CA032A4D7FE18168C5FD0A7B05B2D41207BAE04B6E23D90E8EF5649A37636C58F50AF2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

njrat hacked defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

2 signatures

hacked trojan njrat

Behavioral task

behavioral1

Sample

Server.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Behavioral task

behavioral2

Sample

Server.exe

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

155.117.183.181:2017

Mutex

7f17b610b84646a812ffba5fa871e451

Attributes

reg_key
7f17b610b84646a812ffba5fa871e451
splitter
|'|'|

Targets

- Target
  Server.exe
- Size 37KB
- SHA256 1086e2ec8e9274e1639f14084f27d3b47e606c37ccc2a1e4976db6633ef797d5
- MD5 2f61cb4b14e0cf839a4a823eceea88e9
- SHA1 5bc1696dec9c0d82be4ff8910a7ae7c217e9e40e
- SHA512 ec941f09701d4b590777637262a1ea78e816b5121fae483848ad16a8e88460a1399da700f024c81aa0bcf8eb6608d66505bba47047ec63adf0e99268002d1534
- SSDEEP 384:VaDvkit2Zf5W9cTYXyc/lPM20zHFmnPuskrAF+rMRTyN/0L+EcoinblneHQM3ep4:kDqjjTYic/lkEPuprM+rMRa8NuSRt
- TLSH
  T1CA032A4D7FE18168C5FD0A7B05B2D41207BAE04B6E23D90E8EF5649A37636C58F50AF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

hackedtrojannjrat

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation

behavioral2

defense_evasiondiscoverypersistenceprivilege_escalation

© 2018-2026

Terms | Privacy