Overview
overview
6Static
static
3njRAT20Pla...ion.7z
windows10-2004-x64
1njRAT20Pla...ion.7z
windows11-ltsc_2024-x64
1NjRAT 0.7d...IP.dat
windows10-2004-x64
3NjRAT 0.7d...IP.dat
windows11-ltsc_2024-x64
3NjRAT 0.7d...on.exe
windows10-2004-x64
1NjRAT 0.7d...on.exe
windows11-ltsc_2024-x64
1NjRAT 0.7d...am.dll
windows10-2004-x64
3NjRAT 0.7d...am.dll
windows11-ltsc_2024-x64
3NjRAT 0.7d...ch.dll
windows10-2004-x64
3NjRAT 0.7d...ch.dll
windows11-ltsc_2024-x64
3NjRAT 0.7d...ic.dll
windows10-2004-x64
1NjRAT 0.7d...ic.dll
windows11-ltsc_2024-x64
1NjRAT 0.7d...lg.dll
windows10-2004-x64
3NjRAT 0.7d...lg.dll
windows11-ltsc_2024-x64
3NjRAT 0.7d...pw.dll
windows10-2004-x64
1NjRAT 0.7d...pw.dll
windows11-ltsc_2024-x64
1NjRAT 0.7d...c2.dll
windows10-2004-x64
1NjRAT 0.7d...c2.dll
windows11-ltsc_2024-x64
1NjRAT 0.7d...nd.wav
windows10-2004-x64
6NjRAT 0.7d...nd.wav
windows11-ltsc_2024-x64
1NjRAT 0.7d...tub.il
windows10-2004-x64
3NjRAT 0.7d...tub.il
windows11-ltsc_2024-x64
3NjRAT 0.7d...ub.xml
windows10-2004-x64
3NjRAT 0.7d...ub.xml
windows11-ltsc_2024-x64
1NjRAT 0.7d...01.gif
windows10-2004-x64
3NjRAT 0.7d...01.gif
windows11-ltsc_2024-x64
1NjRAT 0.7d...02.gif
windows10-2004-x64
3NjRAT 0.7d...02.gif
windows11-ltsc_2024-x64
1NjRAT 0.7d...03.gif
windows10-2004-x64
3NjRAT 0.7d...03.gif
windows11-ltsc_2024-x64
1NjRAT 0.7d...04.gif
windows10-2004-x64
3NjRAT 0.7d...04.gif
windows11-ltsc_2024-x64
1General
- Target njRAT20Platinum%20Edition.7z
- Size 9.1MB
- Sample260901-15zfrsfa56
- SHA256 7d3bcb4806e95a92a114bade2f5ead8c07cdf03346c0aa7a70b65df952024f4a
- MD5 bd0e12be95bf3f7551e94d488eb6c94e
- SHA1 717342296a37df29ed3781dc6da4468da17d46d0
- SHA512 7fc4f4eef27258593d9bba96dd2af3706a9b20ccdb0517ea5c65add37e2812f9fd2607a7ada7e6a476b99af346a0576321e9b43b0be39bac0dd8e1b0ae37e88b
- SSDEEP 196608:388wT8/twVwAtMKX8v2Y01nkpAt/Ske0m1cu25kEjU:3UVwzKX6/06pAZBehe4qU
- TLSH T16FA633332EAF8D0FCE4675A033D2C913A6D0A478F342502998D593FDC9A596DD2A61F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
njRAT20Platinum%20Edition.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
njRAT20Platinum%20Edition.7z
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
NjRAT 0.7d Platinum Edition/GeoIP.dat
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
NjRAT 0.7d Platinum Edition/GeoIP.dat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
NjRAT 0.7d Platinum Edition/NjRat 0.7d Platinum Edition.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
NjRAT 0.7d Platinum Edition/NjRat 0.7d Platinum Edition.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
NjRAT 0.7d Platinum Edition/Plugin/cam.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
NjRAT 0.7d Platinum Edition/Plugin/cam.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
NjRAT 0.7d Platinum Edition/Plugin/ch.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
NjRAT 0.7d Platinum Edition/Plugin/ch.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
NjRAT 0.7d Platinum Edition/Plugin/mic.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
NjRAT 0.7d Platinum Edition/Plugin/mic.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
NjRAT 0.7d Platinum Edition/Plugin/plg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
NjRAT 0.7d Platinum Edition/Plugin/plg.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
NjRAT 0.7d Platinum Edition/Plugin/pw.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
NjRAT 0.7d Platinum Edition/Plugin/pw.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
NjRAT 0.7d Platinum Edition/Plugin/sc2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
NjRAT 0.7d Platinum Edition/Plugin/sc2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
NjRAT 0.7d Platinum Edition/Sound/Sound.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
NjRAT 0.7d Platinum Edition/Sound/Sound.wav
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
NjRAT 0.7d Platinum Edition/Stub/Stub.il
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
NjRAT 0.7d Platinum Edition/Stub/Stub.il
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
NjRAT 0.7d Platinum Edition/Stub/Stub.xml
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
NjRAT 0.7d Platinum Edition/Stub/Stub.xml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
NjRAT 0.7d Platinum Edition/Terror/01.gif
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
NjRAT 0.7d Platinum Edition/Terror/01.gif
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral27
Sample
NjRAT 0.7d Platinum Edition/Terror/02.gif
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
NjRAT 0.7d Platinum Edition/Terror/02.gif
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
NjRAT 0.7d Platinum Edition/Terror/03.gif
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
NjRAT 0.7d Platinum Edition/Terror/03.gif
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
NjRAT 0.7d Platinum Edition/Terror/04.gif
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
NjRAT 0.7d Platinum Edition/Terror/04.gif
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target njRAT20Platinum%20Edition.7z
- Size 9.1MB
- SHA256 7d3bcb4806e95a92a114bade2f5ead8c07cdf03346c0aa7a70b65df952024f4a
- MD5 bd0e12be95bf3f7551e94d488eb6c94e
- SHA1 717342296a37df29ed3781dc6da4468da17d46d0
- SHA512 7fc4f4eef27258593d9bba96dd2af3706a9b20ccdb0517ea5c65add37e2812f9fd2607a7ada7e6a476b99af346a0576321e9b43b0be39bac0dd8e1b0ae37e88b
- SSDEEP 196608:388wT8/twVwAtMKX8v2Y01nkpAt/Ske0m1cu25kEjU:3UVwzKX6/06pAZBehe4qU
- TLSH T16FA633332EAF8D0FCE4675A033D2C913A6D0A478F342502998D593FDC9A596DD2A61F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target NjRAT 0.7d Platinum Edition/GeoIP.dat
- Size 1.1MB
- SHA256 b4bfd1ebc50f0eaab3d3f4c2152feae7aa8efad380b85064153a6bfd006c6210
- MD5 a0a228c187329ad148f33c81ddb430bb
- SHA1 d70ec83d1b15b3156df73802dd1bec024b1b9346
- SHA512 0fe0a62c07f7ade0e6bfac8843c13c055369177935d801488a993bc4bcdb9da220ba1b37df2027dab8af7c15e5cf00b3e8f223b12165d8a1b0b9c30dc9939332
- SSDEEP 24576:WUH7rp/TXKHJBjsN0wjAu6e3akVX7k+k7bKnz+AHxOxaz+hnV647KyMLh:WUH3p/TKpBjs0b+akV4+C0axaz+ZVL7o
- TLSH T129358C22FF0696DBA9413D9EBD189EDC18148DB9FD071339625E379C60B8374CCC26A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target NjRAT 0.7d Platinum Edition/NjRat 0.7d Platinum Edition.exe
- Size 11.7MB
- SHA256 9ab816324c6738518dbad693d714f28aa5dea87c21133dd866ba704d2a44fd71
- MD5 ca058fb3c20c86e01bbdb0e61eb868be
- SHA1 16c1496084d867d7fa5126c8786161b141d8241d
- SHA512 848ebd5e6fa1bfda7708a19cb328cfff11adbc8a1aff01bef215771f3143aec886ce0456539bbc011698c8d645ae2c5ad786c4d786f242acf18c1178588f8b74
- SSDEEP 98304:x36NpwLxRMDoMu2WlwDxL73yUcqOGIm1eOVqnqW5nnim//7uvwCt5tuo32v:x3IwxQiU5Odm1eOEn1nnim//7uVtF
- TLSH T1AEC69C02B295D915E0BE52F4D2E18AFA06B5BD0ED134C2BB25A03F69B9F17D17C423C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target NjRAT 0.7d Platinum Edition/Plugin/cam.dll
- Size 63KB
- SHA256 8aeec9c0a673f2043bec795d8430c280392913ac275fbaa3380524ad2148eaf8
- MD5 b0f1130c6da19dbdb8556f910f168420
- SHA1 e09ffdb725dc2ca0bc28a58a4615c0f3bcf08adb
- SHA512 4d97ac1ec120120c22d2fa39c3bcdafbaf6796da4742154323860ede74a56fffadfd3734b2fcd37e60ea0334e951e3c2d7b05c52235db89bde3fa2a1424224fa
- SSDEEP 1536:SwmVRUhn1vP9QJwnXusCEtsIbepigBULPqa:SwmYZ1WJQIEeIbepigBy1
- TLSH T15853392A2B98641BC58E577C90B30F0003F0D65A7623EB8A6F7961BDDD723944B173A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target NjRAT 0.7d Platinum Edition/Plugin/ch.dll
- Size 49KB
- SHA256 f7207fe050d79261b79d74a17801f63d0c12f64af6ef6addfa13ad58709ff20d
- MD5 dfd170868b04cf7328088a1e3e2354d6
- SHA1 155817f02750e472b1ac257a454c8fa504aaa68e
- SHA512 5994006b28f5df04826b832a564fdd9c35f81364b3371878b4843c240de1fc45778663e9884f94019381a4768fe91d9e5002b83eacab7fae5ad27ae31ef76bcf
- SSDEEP 768:BvVVVVzUCJAQgLudcBp4wA++2dumLPWZNE98trDB1Y+xSkwhAz2GWsuNvp4bSOTs:BvVvVQ7cuS++QOvEmtrl1xSNhxe6l8I
- TLSH T1C6339D5922E1C363CDFE4B394562660003F2CC51CB16EB6F7E9931DCA8F73648B1228A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target NjRAT 0.7d Platinum Edition/Plugin/mic.dll
- Size 49KB
- SHA256 7bae6ec2613874287c20ddcbdf75e7cca0ac65132485dfcfd632d0e5f97c1719
- MD5 e9214452435d0e6f782b545ec0123331
- SHA1 1705609d15c0c7cab4ebcb28f082cfcb8e1f80ac
- SHA512 05cbe650b1ed26193128cba8d58fbe4c96ccb5931d877a6937e4a442f74412fd3cdda46b5cff4390a71133cba4c10c778377988c657eebfe5e631ae4f445ebce
- SSDEEP 768:F6YK5hvcdWNbu/GemZgXEFajkt22rB7BJodsx7fuhwWFTxqPbqgmB:F6/xemZgY9V7Jx7fvWFTxqPb7m
- TLSH T16333D6507EA41CBAC16B067DACE61112F6B18D68B227E76B1CFD60F758833DE86406F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target NjRAT 0.7d Platinum Edition/Plugin/plg.dll
- Size 28KB
- SHA256 bd5a390efa75b9a47077fa1e7558713842563ec5822eb7f1dbf35ad9020012dc
- MD5 4643db3dbf75200efa97e80cfcf2da1d
- SHA1 cd65423fbeb54a82f1312ad96c848a261047ccba
- SHA512 ccacfcf1e9325ee3dba0556cc527eae2b856531a7d963072181549e3e76395d42be27206f0312a5fa30d8d35df75a64382a399fb61c26cef703671fe21fb25e9
- SSDEEP 384:uLPMDSXbwv1qppRt9LmCfvEk/LcEf6snTlC3/b3DP0lpm+x6dzWxQpbiqWz5matX:48tyRt9LmCfD2j3rc+KUbkoa+h
- TLSH T1BED2B40D2BA5C42AC37E47355D6643224AF3421B4915EE2E0CDF8EED1BA37C84B85A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target NjRAT 0.7d Platinum Edition/Plugin/pw.dll
- Size 39KB
- SHA256 a3e4bee1b6944aa9266bd58de3f534a4c1896df621881a5252a0d355a6e67c70
- MD5 db87daf76c15f3808cec149f639aa64f
- SHA1 d67f84a44ddc25432ce179aeba9cff778af746ee
- SHA512 ad7dc75254180ff7c988b7f394ad76b696384002457d558469d2c6401dd97cba54c532245bb555ab28d2beda3ab504736bb2b89040a21ba6598929392daab473
- SSDEEP 768:fqcFOkBO3jzamnEjt0Wp8em0nktiwRnKSg42+:fvg3jumny0Wp8em08NBgG
- TLSH T10F037D067BC69301EABD8FB51CB281444372D28F5D13E79E1CE988F42B76B900955BEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target NjRAT 0.7d Platinum Edition/Plugin/sc2.dll
- Size 12KB
- SHA256 8e816523110bb2ab5e7611c0322cc4aa2d6c8d2a899b3a03731965ed1644549b
- MD5 801a5d1e272399ca14ff7d6da60315ef
- SHA1 e546ef8f00d96404823a1ed242ed7b56167da2f7
- SHA512 32eeb2302cfe06e996f2d729d440fc2796d16e33fd9d793c5eaf379e8450d67e177d5c254721c6fd5636c92e55439054b982e0820a757ebd5e65584d3f0c739a
- SSDEEP 192:0SDIUapMH4ftIjPPjb3DX8oB2/mZLkM0Lj08Lt21TGzRpy7yNVILDB61d+ZMt2jt:0SDi+4lILL6/IQM0n0881TE3y2QXM1dY
- TLSH T18A42F70DBF18C217E65C0BBD116357259376C05B1303FF2B9EC9A4F7A8AA3C26658399
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target NjRAT 0.7d Platinum Edition/Sound/Sound.wav
- Size 44KB
- SHA256 bc2555818d01283fa4d7fdba21428a154380f0e0815b227d94700e12d765aa9c
- MD5 3ce72fec0e52aef76e1a66f521c61e80
- SHA1 54620000a04737ed9637eb21c9647e84709e4f1a
- SHA512 50475b67cfb7f5051e7a03e361c660922e3bfb4af76c9cc20838df7ea5cf28fa9e30a65cc3ca7b8636ea63026fbb847f81a9f292a0de870e78c51a5cddafa15c
- SSDEEP 768:tFMHTYRe0vPOkq/A6nHdPRzKnaHFfAfSYryO2sqhTn8nTD/dL9EMUA4a0H5V8DfO:tFMcTOkWHd9KnqFfQSYryOvYn8TD/dLW
- TLSH T187238DF14482A142E607C3F8FE1EC9E8E546ADE9CACDD25B5844FD5A18E2634D4DFC82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target NjRAT 0.7d Platinum Edition/Stub/Stub.il
- Size 600KB
- SHA256 0a91c962ad6b5fc62cf1e7e83a088840a2d8e9c728ae642403e4563e4512c5c1
- MD5 dcddb1955c514eece40a62e16df05de7
- SHA1 6535a11f031a3e5f206a58e16527fb9b68c633dc
- SHA512 b61693c32c28cf9ac45d530651204f9cb9c964ff3d2340b0037e549926f89f327d33ded90ec3e7eecc600ca2429843db62f15c57d3df40dce6f8f047f16361fb
- SSDEEP 12288:2PB73A2nxaCpY4uqmXSxyosK+M8K2J2SzsW9pyP2xXR6DpS3TtFVcN1tkOJOP+6V:9dd
- TLSH T10CD4FE2982289585D5B2601DBE72CB46F77F52270F71AC967CEFC254FF32289427423A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target NjRAT 0.7d Platinum Edition/Stub/Stub.manifest
- Size 487B
- SHA256 835a00d6e7c43db49ae7b3fa12559f23c2920b7530f4d3f960fd285b42b1efb5
- MD5 4d18ac38a92d15a64e2b80447b025b7e
- SHA1 5c34374c2dd5afa92e0489f1d6f86dde616aca6c
- SHA512 72be79acd72366b495e0f625a50c9bdf01047bcf5f9ee1e3bdba10dab7bd721b0126f429a91d8c80c2434e8bc751defdf4c05bdc09d26a871df1bb2e22e923bf
- TLSH T16EF0DCC1D188CA6AD73042A13A66E410A2AD435B19DD49EC74DC2ABB6F0BAC680C30F1
- MD5 SHA1 SHA512 TLSH
-
- Target NjRAT 0.7d Platinum Edition/Terror/01.gif
- Size 1.1MB
- SHA256 5be15f37760e46885023ea9cd8fb5a6a01dc6114f39abdd769a5a8fed322aaa3
- MD5 3e8a5b5323064645e69330de8dff0484
- SHA1 c1d7ad4229b88bf9021a0facc02c65844d04e154
- SHA512 2ad6a54b56e126970a7c1b9acb8d735505a107b34a2a9e6ed52ba5cb3135317dbf3e18bea5b4b87ba55ff4c3c8cb986b5d13650e8050eed81d3b33703466a9a0
- SSDEEP 24576:s/We4/88N3TROXwrDnetfCnEfex42WEZ/g0HgNyGTu5iBnEyUfKzW:Yl4ZNVxDn2qEfEvTl5KLuo2yUcW
- TLSH T11845331FCD0497482A6FA94487AB2B23A2C7C61C4FBAB670D46B507C519337361DE6DC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target NjRAT 0.7d Platinum Edition/Terror/02.gif
- Size 676KB
- SHA256 94333c1e9a0961648a33db91f9e453e65b25e40106db6b639637fbedcc05e2a6
- MD5 830902dd51dad22083b885a7b51ac3cc
- SHA1 a5cfc3391721b40f4c6219f7644628116ef0ae71
- SHA512 9d409da6f1eba7041726df402ae2fb183e320a5bb81fd3837f6f4b67a88b628d4f571f7e1e2df33d0357bea396683036e9af6c2acac1d9e9931f6faf607cdd8b
- SSDEEP 12288:RNvP2rOQiVfaMkS5yKnO8zhk/rJyALyMCnHuqb2kkWy/jdV/OsdQ1:RNXcLMy8ziJyrMAO+nJyP/Osm1
- TLSH T1E2E423C3C7E13378EA1EE1B8494D8754C20BC8B45B701BB9398879AFBFA11392301DA5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target NjRAT 0.7d Platinum Edition/Terror/03.gif
- Size 241KB
- SHA256 b4bc127b5d66ab018235635fc12fe65d6ce97f9f8350e965213d9dca9264da45
- MD5 5a7b5ec0c06f5cbe1e04dbf070c510fb
- SHA1 8376a1e841035cec698bc1711672e7dba79aaf87
- SHA512 336f830d2ebe82ed782f1a9881a87f2726ef33e26a1659875ca346c8c8b325ec65cbb55ad8fcaaeb5da58865bb79a2d03192cb0fe75fe9be77da41b2537df2df
- SSDEEP 6144:8p3sCQ1AWnK1NOZ2l8iQojWaCZ0pak0l1aNmN4/nzx:4i1Az18YDQ1aq0ok0d+nzx
- TLSH T157341299DE97C513D28C9A767AD3840A4C5E04F02797BD5C7AC88D9CAD4CC232A8F4DE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target NjRAT 0.7d Platinum Edition/Terror/04.gif
- Size 297KB
- SHA256 8d070d9c04be926f34064e585edc84c8837bc4476eacde6b046e855d213f48fc
- MD5 c29a3be5142c2304ec7b8a6d8a4fe0f1
- SHA1 2df712ce87e022d9c69e3bc9f4e17822840715f0
- SHA512 62166c06c7e340d779670a75654fe4538133d1f0022a9ae4869192375ca6133802c006fabe0f67d1c7f155a13d6e28f70a3f9c199927ad628227e744d454728b
- SSDEEP 6144:PXt50HhZafhJ2zcDk1DeNxwO4xh0bRaFIVYGE9Gt2DcBV:PXeofhLA1DAwOJjVYB4ucBV
- TLSH T1CD5423F11B1D2849C45C6F61B8070AC26E2294E7832A6F590F23E654F4F77B486AE72C
- MD5 SHA1 SHA512 SSDEEP TLSH