njrat | 077fb319a56fb14cf6065c9e9a5f05d1acc6f6e44ba3e0de113c5022da634325 | Triage™

Login
Reports

Overview

overview

Static

static

Client.exe

windows10-2004-x64

Client.exe

windows10-ltsc_2021-x64

Resubmissions

08/09/2026, 02:00

260908-ce1zxaytc1

08/09/2026, 01:57

260908-cdqgsazdpb10

Sharing

Copy URL Twitter E-mail

General

Target
Client.exe
Size 31KB
Sample260908-cdqgsazdpb
SHA256 077fb319a56fb14cf6065c9e9a5f05d1acc6f6e44ba3e0de113c5022da634325
MD5 3e712fbd37b4b4f297a47939dfd98667
SHA1 b14f5c25f6b7e76786b7ceb88362eb402998f432
SHA512 031b86019a5e5b6b8d2c161e6db031c3a93eec5a619acd50ec8739ef533ddb20b5923c1ebd5cc2e405e0ec242dd576284114ab7d8d109002be3b307032a82dbb
SSDEEP 768:3hHenvSNzj9REzxv6/YNHD3I8tvh/5QmIDUu0tiq0j:cv4zqzJvQVk2j
TLSH
T1B8E22BADFBE6446AD1BD0AB50571951053B8D043E513F77E4ECA24A62B3B3C84B88DF2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

njrat mybot defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

2 signatures

mybot trojan njrat

Behavioral task

behavioral1

Sample

Client.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

defense_evasion discovery njrat persistence privilege_escalation trojan

Behavioral task

behavioral2

Sample

Client.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

6 signatures

150 seconds

defense_evasion discovery njrat persistence privilege_escalation trojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

sa6orrrrrrw-43025.portmap.host:43025

Mutex

1e08c79712ff215844fa67b48d189892

Attributes

reg_key
1e08c79712ff215844fa67b48d189892
splitter
Y262SUCZ4UJJ

Targets

- Target
  Client.exe
- Size 31KB
- SHA256 077fb319a56fb14cf6065c9e9a5f05d1acc6f6e44ba3e0de113c5022da634325
- MD5 3e712fbd37b4b4f297a47939dfd98667
- SHA1 b14f5c25f6b7e76786b7ceb88362eb402998f432
- SHA512 031b86019a5e5b6b8d2c161e6db031c3a93eec5a619acd50ec8739ef533ddb20b5923c1ebd5cc2e405e0ec242dd576284114ab7d8d109002be3b307032a82dbb
- SSDEEP 768:3hHenvSNzj9REzxv6/YNHD3I8tvh/5QmIDUu0tiq0j:cv4zqzJvQVk2j
- TLSH
  T1B8E22BADFBE6446AD1BD0AB50571951053B8D043E513F77E4ECA24A62B3B3C84B88DF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery njrat persistence privilege_escalation trojan
- Family: njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

mybottrojannjrat

behavioral1

defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan

behavioral2

defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan

© 2018-2026

Terms | Privacy