njrat | affd60ae102eccc68bae49677251d6ef3b82eebfcc24f1f3ec95588578823b18

General

Target
2026-07-25_53fbacfa6b665550ed707b06664754c9_cobian_drokbk_elex_glassworm_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 1.4MB
Sample260726-btlcbsxtfw
SHA256 affd60ae102eccc68bae49677251d6ef3b82eebfcc24f1f3ec95588578823b18
MD5 53fbacfa6b665550ed707b06664754c9
SHA1 e500f12a2c2497181ac15a35c56bb81fb675f042
SHA512 bc624be2a46bfd2a2800d69a9fae8537c527fb25c0f606737064220fe741c3fd8366db6c93ff8190d829ab520eb85ca485452fd418b8210bfd3e77a1f7b45952
SSDEEP 24576:dvk70TrcIvpEgXkj9c+Rtt8uOD44WtNFSE3e4jD88t1hg+sq5b4Cqkc/YRdkx59z:dvkQTAInX29xRtt8X4ttzST4vtI+XhNQ
TLSH
T11265231531A1C072C0BB127181E2CEB65E7D58939777E2977BA42EA62F613C247362CF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

Windows

Attributes

reg_key
Windows
splitter
|-F-|

Targets

- Target
  2026-07-25_53fbacfa6b665550ed707b06664754c9_cobian_drokbk_elex_glassworm_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 affd60ae102eccc68bae49677251d6ef3b82eebfcc24f1f3ec95588578823b18
- MD5 53fbacfa6b665550ed707b06664754c9
- SHA1 e500f12a2c2497181ac15a35c56bb81fb675f042
- SHA512 bc624be2a46bfd2a2800d69a9fae8537c527fb25c0f606737064220fe741c3fd8366db6c93ff8190d829ab520eb85ca485452fd418b8210bfd3e77a1f7b45952
- SSDEEP 24576:dvk70TrcIvpEgXkj9c+Rtt8uOD44WtNFSE3e4jD88t1hg+sq5b4Cqkc/YRdkx59z:dvkQTAInX29xRtt8X4ttzST4vtI+XhNQ
- TLSH
  T11265231531A1C072C0BB127181E2CEB65E7D58939777E2977BA42EA62F613C247362CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Drops startup file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2