Overview
overview
6Static
static
3njRAT20Pla...ion.7z
windows10-2004-x64
1njRAT20Pla...ion.7z
windows11-ltsc_2024-x64
1NjRAT 0.7d...IP.dat
windows10-2004-x64
3NjRAT 0.7d...IP.dat
windows11-ltsc_2024-x64
3NjRAT 0.7d...on.exe
windows10-2004-x64
1NjRAT 0.7d...on.exe
windows11-ltsc_2024-x64
1NjRAT 0.7d...am.dll
windows10-2004-x64
3NjRAT 0.7d...am.dll
windows11-ltsc_2024-x64
3NjRAT 0.7d...ch.dll
windows10-2004-x64
3NjRAT 0.7d...ch.dll
windows11-ltsc_2024-x64
3NjRAT 0.7d...ic.dll
windows10-2004-x64
1NjRAT 0.7d...ic.dll
windows11-ltsc_2024-x64
1NjRAT 0.7d...lg.dll
windows10-2004-x64
3NjRAT 0.7d...lg.dll
windows11-ltsc_2024-x64
3NjRAT 0.7d...pw.dll
windows10-2004-x64
1NjRAT 0.7d...pw.dll
windows11-ltsc_2024-x64
1NjRAT 0.7d...c2.dll
windows10-2004-x64
1NjRAT 0.7d...c2.dll
windows11-ltsc_2024-x64
1NjRAT 0.7d...nd.wav
windows10-2004-x64
6NjRAT 0.7d...nd.wav
windows11-ltsc_2024-x64
1NjRAT 0.7d...tub.il
windows10-2004-x64
3NjRAT 0.7d...tub.il
windows11-ltsc_2024-x64
3NjRAT 0.7d...ub.xml
windows10-2004-x64
3NjRAT 0.7d...ub.xml
windows11-ltsc_2024-x64
1NjRAT 0.7d...01.gif
windows10-2004-x64
3NjRAT 0.7d...01.gif
windows11-ltsc_2024-x64
1NjRAT 0.7d...02.gif
windows10-2004-x64
3NjRAT 0.7d...02.gif
windows11-ltsc_2024-x64
1NjRAT 0.7d...03.gif
windows10-2004-x64
3NjRAT 0.7d...03.gif
windows11-ltsc_2024-x64
1NjRAT 0.7d...04.gif
windows10-2004-x64
3NjRAT 0.7d...04.gif
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/09/2026, 22:14
Static task
static1
Behavioral task
behavioral1
Sample
njRAT20Platinum%20Edition.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
njRAT20Platinum%20Edition.7z
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
NjRAT 0.7d Platinum Edition/GeoIP.dat
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
NjRAT 0.7d Platinum Edition/GeoIP.dat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
NjRAT 0.7d Platinum Edition/NjRat 0.7d Platinum Edition.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
NjRAT 0.7d Platinum Edition/NjRat 0.7d Platinum Edition.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
NjRAT 0.7d Platinum Edition/Plugin/cam.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
NjRAT 0.7d Platinum Edition/Plugin/cam.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
NjRAT 0.7d Platinum Edition/Plugin/ch.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
NjRAT 0.7d Platinum Edition/Plugin/ch.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
NjRAT 0.7d Platinum Edition/Plugin/mic.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
NjRAT 0.7d Platinum Edition/Plugin/mic.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
NjRAT 0.7d Platinum Edition/Plugin/plg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
NjRAT 0.7d Platinum Edition/Plugin/plg.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
NjRAT 0.7d Platinum Edition/Plugin/pw.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
NjRAT 0.7d Platinum Edition/Plugin/pw.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
NjRAT 0.7d Platinum Edition/Plugin/sc2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
NjRAT 0.7d Platinum Edition/Plugin/sc2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
NjRAT 0.7d Platinum Edition/Sound/Sound.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
NjRAT 0.7d Platinum Edition/Sound/Sound.wav
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
NjRAT 0.7d Platinum Edition/Stub/Stub.il
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
NjRAT 0.7d Platinum Edition/Stub/Stub.il
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
NjRAT 0.7d Platinum Edition/Stub/Stub.xml
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
NjRAT 0.7d Platinum Edition/Stub/Stub.xml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
NjRAT 0.7d Platinum Edition/Terror/01.gif
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
NjRAT 0.7d Platinum Edition/Terror/01.gif
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral27
Sample
NjRAT 0.7d Platinum Edition/Terror/02.gif
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
NjRAT 0.7d Platinum Edition/Terror/02.gif
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
NjRAT 0.7d Platinum Edition/Terror/03.gif
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
NjRAT 0.7d Platinum Edition/Terror/03.gif
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
NjRAT 0.7d Platinum Edition/Terror/04.gif
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
NjRAT 0.7d Platinum Edition/Terror/04.gif
Resource
win11ltsc2024-20260709-en
General
- Target njRAT20Platinum%20Edition.7z
- Size 9.1MB
- Sample260901-15zfrsfa56
- SHA256 7d3bcb4806e95a92a114bade2f5ead8c07cdf03346c0aa7a70b65df952024f4a
- MD5 bd0e12be95bf3f7551e94d488eb6c94e
- SHA1 717342296a37df29ed3781dc6da4468da17d46d0
- SHA512 7fc4f4eef27258593d9bba96dd2af3706a9b20ccdb0517ea5c65add37e2812f9fd2607a7ada7e6a476b99af346a0576321e9b43b0be39bac0dd8e1b0ae37e88b
- SSDEEP 196608:388wT8/twVwAtMKX8v2Y01nkpAt/Ske0m1cu25kEjU:3UVwzKX6/06pAZBehe4qU
- TLSH T16FA633332EAF8D0FCE4675A033D2C913A6D0A478F342502998D593FDC9A596DD2A61F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 616 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 616 7zFM.exe Token: 35 616 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 616 7zFM.exe