njrat | b137dd0912a2ba2e352d1dca4bb950969a1c8bb574c013ba7080e3c1c37280af | Triage™

Login
Reports

Overview

overview

Static

static

Server.exe

windows10-2004-x64

Server.exe

windows11-ltsc_2024-x64

Resubmissions

06/08/2026, 03:47

260806-eckk9adj3y10

03/08/2026, 05:12

260803-fv7deace3610

Sharing

Copy URL Twitter E-mail

General

Target
Server.exe
Size 23KB
Sample260806-eckk9adj3y
SHA256 b137dd0912a2ba2e352d1dca4bb950969a1c8bb574c013ba7080e3c1c37280af
MD5 5c076b7cd4229d9a43d1f692629d6ddd
SHA1 fc9331cb9f0af5ab9f05410cdff68ab8a38bb8cf
SHA512 fa4ddba7dc75b88cc4fad44052aede30baa222078f2a1a8cb2edb97922e5fc35295f55ed2eb36f79561f2303a3c381af084b453c31420b269cb0f29613dc54d6
SSDEEP 384:f+n2650N3qZbATcjRGC5Eo9D46BgnqUhay1ZmRvR6JZlbw8hqIusZzZTmty:4m+71d5XRpcnupc
TLSH
T132B22A4E3FB98856C4BC177486A6965003B0A1870413EE2FCCC554DBAFB3AD92D4CAF9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

njrat hacked defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

2 signatures

hacked trojan njrat

Behavioral task

behavioral1

Sample

Server.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

defense_evasion discovery njrat persistence privilege_escalation trojan

Behavioral task

behavioral2

Sample

Server.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

defense_evasion discovery njrat persistence privilege_escalation trojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

24.tcp.cpolar.top:10236

Mutex

0237dc3e7dcefa6aefa82bdf90259f2e

Attributes

reg_key
0237dc3e7dcefa6aefa82bdf90259f2e
splitter
|'|'|

Targets

- Target
  Server.exe
- Size 23KB
- SHA256 b137dd0912a2ba2e352d1dca4bb950969a1c8bb574c013ba7080e3c1c37280af
- MD5 5c076b7cd4229d9a43d1f692629d6ddd
- SHA1 fc9331cb9f0af5ab9f05410cdff68ab8a38bb8cf
- SHA512 fa4ddba7dc75b88cc4fad44052aede30baa222078f2a1a8cb2edb97922e5fc35295f55ed2eb36f79561f2303a3c381af084b453c31420b269cb0f29613dc54d6
- SSDEEP 384:f+n2650N3qZbATcjRGC5Eo9D46BgnqUhay1ZmRvR6JZlbw8hqIusZzZTmty:4m+71d5XRpcnupc
- TLSH
  T132B22A4E3FB98856C4BC177486A6965003B0A1870413EE2FCCC554DBAFB3AD92D4CAF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery njrat persistence privilege_escalation trojan
- Family: njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  defense_evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

hackedtrojannjrat

behavioral1

defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan

behavioral2

defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan

© 2018-2026

Terms | Privacy