njrat | 3a0983688c0a8643e86e7a837447a7db08f709e5db35c442c36f418e998329e3 | Triage™

Login
Reports

Overview

overview

Static

static

Server.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
Server.exe
Size 37KB
Sample260901-3nbz9azbjf
SHA256 3a0983688c0a8643e86e7a837447a7db08f709e5db35c442c36f418e998329e3
MD5 5908cbaa4263e2b8a0564a053398297a
SHA1 3f38b362359c3a3a95adad801922eeb827d03ef7
SHA512 7d16a9e389efd76ed02601dce35c9bc1f88cb12632749f63494aafb177abe32ebc20e1c6c892b7dd3fa1a6ac70a3aa3606affbf23945b86ecf518f44a851eabd
SSDEEP 768:Pzy09EohT1CFU7NuhibMgrM+rMRa8NukGt:Bh1CKhuhi47+gRJNL
TLSH
T166033A4D7FE18168C4FD467B06B2E012077AE04B6E23D91E8EE5649A37236C58B54AF2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

njrat hacked defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

2 signatures

hacked trojan njrat

Behavioral task

behavioral1

Sample

Server.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

127.0.0.1:7000

Mutex

3a28393e719f62122bba7edff3fb6443

Attributes

reg_key
3a28393e719f62122bba7edff3fb6443
splitter
|'|'|

Targets

- Target
  Server.exe
- Size 37KB
- SHA256 3a0983688c0a8643e86e7a837447a7db08f709e5db35c442c36f418e998329e3
- MD5 5908cbaa4263e2b8a0564a053398297a
- SHA1 3f38b362359c3a3a95adad801922eeb827d03ef7
- SHA512 7d16a9e389efd76ed02601dce35c9bc1f88cb12632749f63494aafb177abe32ebc20e1c6c892b7dd3fa1a6ac70a3aa3606affbf23945b86ecf518f44a851eabd
- SSDEEP 768:Pzy09EohT1CFU7NuhibMgrM+rMRa8NukGt:Bh1CKhuhi47+gRJNL
- TLSH
  T166033A4D7FE18168C4FD467B06B2E012077AE04B6E23D91E8EE5649A37236C58B54AF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

hackedtrojannjrat

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation

© 2018-2026

Terms | Privacy