njRATv0.9d.7z
- SHA256 d140d65ddeaf724ddde989dc0073f364d8b684c4664cd71a0f2edfceee2f2eaf
Overview
overview
10Static
static
10njRAT v0.9...SM.dll
windows10-2004-x64
1njRAT v0.9...SM.dll
windows11-ltsc_2024-x64
8njRAT v0.9...ub.apk
android-9-x86
njRAT v0.9...ub.apk
android-10-x64
njRAT v0.9...ub.apk
android-11-x64
njRAT v0.9...es.dll
windows10-2004-x64
1njRAT v0.9...es.dll
windows11-ltsc_2024-x64
8njRAT v0.9...er.dll
windows10-2004-x64
1njRAT v0.9...er.dll
windows11-ltsc_2024-x64
8njRAT v0.9...am.dll
windows10-2004-x64
1njRAT v0.9...am.dll
windows11-ltsc_2024-x64
8njRAT v0.9...pe.dll
windows10-2004-x64
1njRAT v0.9...pe.dll
windows11-ltsc_2024-x64
1njRAT v0.9... A.dll
windows10-2004-x64
1njRAT v0.9... A.dll
windows11-ltsc_2024-x64
1njRAT v0.9...mp.dll
windows10-2004-x64
1njRAT v0.9...mp.dll
windows11-ltsc_2024-x64
1njRAT v0.9...et.dll
windows10-2004-x64
1njRAT v0.9...et.dll
windows11-ltsc_2024-x64
8njRAT v0.9...er.dll
windows10-2004-x64
1njRAT v0.9...er.dll
windows11-ltsc_2024-x64
8njRAT v0.9...cr.dll
windows10-2004-x64
1njRAT v0.9...cr.dll
windows11-ltsc_2024-x64
8njRAT v0.9...us.bat
windows10-2004-x64
1njRAT v0.9...us.bat
windows11-ltsc_2024-x64
1njRAT v0.9...us.dll
windows10-2004-x64
1njRAT v0.9...us.dll
windows11-ltsc_2024-x64
8njRAT v0.9...md.dll
windows10-2004-x64
1njRAT v0.9...md.dll
windows11-ltsc_2024-x64
1njRAT v0.9...er.dll
windows10-2004-x64
1njRAT v0.9...er.dll
windows11-ltsc_2024-x64
1njRAT v0.9...ff.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
njRAT v0.9d/Resources/Imports/Gsm/GSM.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
njRAT v0.9d/Resources/Imports/Gsm/GSM.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral3
Sample
njRAT v0.9d/Resources/Imports/Payload/stub.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral4
Sample
njRAT v0.9d/Resources/Imports/Payload/stub.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral5
Sample
njRAT v0.9d/Resources/Imports/Payload/stub.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
njRAT v0.9d/Store/Abrairnotes.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
njRAT v0.9d/Store/Abrairnotes.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral8
Sample
njRAT v0.9d/Store/Abrier.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
njRAT v0.9d/Store/Abrier.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral10
Sample
njRAT v0.9d/Store/Apraircam.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
njRAT v0.9d/Store/Apraircam.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral12
Sample
njRAT v0.9d/Store/Bipe.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
njRAT v0.9d/Store/Bipe.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral14
Sample
njRAT v0.9d/Store/Delet A.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
njRAT v0.9d/Store/Delet A.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral16
Sample
njRAT v0.9d/Store/Delettemp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
njRAT v0.9d/Store/Delettemp.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral18
Sample
njRAT v0.9d/Store/Destentrnet.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
njRAT v0.9d/Store/Destentrnet.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral20
Sample
njRAT v0.9d/Store/User.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
njRAT v0.9d/Store/User.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral22
Sample
njRAT v0.9d/Store/dcr.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
njRAT v0.9d/Store/dcr.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral24
Sample
njRAT v0.9d/Store/destedmous.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
njRAT v0.9d/Store/destedmous.bat
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral26
Sample
njRAT v0.9d/Store/dromous.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
njRAT v0.9d/Store/dromous.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral28
Sample
njRAT v0.9d/Store/infctcmd.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
njRAT v0.9d/Store/infctcmd.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral30
Sample
njRAT v0.9d/Store/laxer.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
njRAT v0.9d/Store/laxer.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral32
Sample
njRAT v0.9d/Store/logoff.dll
Resource
win10v2004-20260513-en
spynote
[SPY_NOTE_HOST_OK]:[SPY_NOTE_PORT_OK]
Spynote is a Remote Access Trojan first seen in 2017.
| resource | yara_rule |
|---|---|
| static1/unpack001/njRAT v0.9d/Resources/Imports/Payload/stub.il | family_spynote |
Free utilities often used by attackers which can steal passwords, product keys, etc.
| resource | yara_rule |
|---|---|
| static1/unpack001/njRAT v0.9d/Store/pww.dll | Nirsoft |
Password recovery tool for various web browsers
| resource | yara_rule |
|---|---|
| static1/unpack001/njRAT v0.9d/Store/pww.dll | WebBrowserPassView |
| description | ioc |
|---|---|
| Required by device admin receivers to bind with the system. Allows apps to manage device administration features. | android.permission.BIND_DEVICE_ADMIN |
| description | ioc |
|---|---|
| Required by accessibility services to bind with the system. Allows apps to access accessibility features. | android.permission.BIND_ACCESSIBILITY_SERVICE |
| description | ioc |
|---|---|
| Required to be able to access the camera device. | android.permission.CAMERA |
| Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE |
| Allows an application to write and read the user's call log data. | android.permission.WRITE_CALL_LOG |
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
| Required to be able to access the camera device. | android.permission.CAMERA |
| Allows access to the list of accounts in the Accounts Service. | android.permission.GET_ACCOUNTS |
| Allows an application to write the user's contacts data. | android.permission.WRITE_CONTACTS |
| Allows an application to read the user's contacts data. | android.permission.READ_CONTACTS |
| Allows an application to record audio. | android.permission.RECORD_AUDIO |
| Allows an application to read SMS messages. | android.permission.READ_SMS |
| Allows an application to read the user's call log. | android.permission.READ_CALL_LOG |
| Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE |
| Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. | android.permission.CALL_PHONE |
| Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION |
| Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION |
| Allows an application to receive SMS messages. | android.permission.RECEIVE_SMS |
| Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. | android.permission.PROCESS_OUTGOING_CALLS |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/njRAT v0.9d/Resources/Imports/Payload/stub.il |
Spynote payload
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Detected Nirsoft tools
Free utilities often used by attackers which can steal passwords, product keys, etc.
NirSoft WebBrowserPassView
Password recovery tool for various web browsers