njrat | 64d8f6456140746ac1e5131ab8ada166c62893d53e7daf3d6a829292a7cfefd8 | Triage™

Login
Reports

Overview

overview

Static

static

743759338B...A1.exe

windows10-2004-x64

743759338B...A1.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
743759338B45950208EA9D6CB6A99AA1.exe
Size 23KB
Sample260903-31gfhaybqa
SHA256 64d8f6456140746ac1e5131ab8ada166c62893d53e7daf3d6a829292a7cfefd8
MD5 743759338b45950208ea9d6cb6a99aa1
SHA1 0784ebd2aa021e89f12a06a7345ae81556ac3a7a
SHA512 784fada240a0d93e0d88440376d1d48ec05d7f624724cbd6572d16d258e9d9a75b57f3c2765bdbb6c56aa23f1e59e4a90dfeba083edfa52478605d51b13c9d32
SSDEEP 384:LweXCQIreJig/8Z7SS1fEBpng6tgL2IBPZVmRvR6JZlbw8hqIusZzZjyr:sLq411eRpcnumw
TLSH
T14BB22B4E3FB98856C5AC17748AA5965003B4D1870423EE2FCCC550CBAFB3ADA5D4CAF9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

njrat hacked defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

2 signatures

hacked trojan njrat

Behavioral task

behavioral1

Sample

743759338B45950208EA9D6CB6A99AA1.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

40 seconds

defense_evasion discovery njrat persistence privilege_escalation trojan

Behavioral task

behavioral2

Sample

743759338B45950208EA9D6CB6A99AA1.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

7 signatures

40 seconds

defense_evasion discovery njrat persistence privilege_escalation trojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

5.tcp.cpolar.cn:14169

Mutex

e5e212f85da1e926a2df9f0ada9f8896

Attributes

reg_key
e5e212f85da1e926a2df9f0ada9f8896
splitter
|'|'|

Targets

- Target
  743759338B45950208EA9D6CB6A99AA1.exe
- Size 23KB
- SHA256 64d8f6456140746ac1e5131ab8ada166c62893d53e7daf3d6a829292a7cfefd8
- MD5 743759338b45950208ea9d6cb6a99aa1
- SHA1 0784ebd2aa021e89f12a06a7345ae81556ac3a7a
- SHA512 784fada240a0d93e0d88440376d1d48ec05d7f624724cbd6572d16d258e9d9a75b57f3c2765bdbb6c56aa23f1e59e4a90dfeba083edfa52478605d51b13c9d32
- SSDEEP 384:LweXCQIreJig/8Z7SS1fEBpng6tgL2IBPZVmRvR6JZlbw8hqIusZzZjyr:sLq411eRpcnumw
- TLSH
  T14BB22B4E3FB98856C5AC17748AA5965003B4D1870423EE2FCCC550CBAFB3ADA5D4CAF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery njrat persistence privilege_escalation trojan
- Family: njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  defense_evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

hackedtrojannjrat

behavioral1

defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan

behavioral2

defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan

© 2018-2026

Terms | Privacy