General

  • Target
    NjRat-0.7D-main.zip
  • Size 43.3MB
  • Sample260910-k9fapagd44
  • SHA256 25365152ad36e5dfed6b05153f5c1477160383af2fae36a24d59af14d76f5155
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • njrat

Version
  • Njrat 0.7 Golden By Hassan Amiri

C2
  • :

Mutex
  • [RNVD]

Attributes
  • reg_key

    [RNVD]

  • splitter

    |Hassan|

Extracted

Family
  • njrat

Version
  • im523

Botnet
  • hacked

C2
  • 185.204.1.236:1111

Mutex
  • c15cd7ce3aae2bd6036dd10a665f69f9

Attributes
  • reg_key

    c15cd7ce3aae2bd6036dd10a665f69f9

  • splitter

    |'|'|

Targets

    • Target
      NjRat-0.7D-main.zip
    • Size 43.3MB
    • SHA256 25365152ad36e5dfed6b05153f5c1477160383af2fae36a24d59af14d76f5155
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      NjRat-0.7D-main/LICENSE
    • Size 34KB
    • SHA256 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      NjRat-0.7D-main/NjRat-Screenshot.png
    • Size 735KB
    • SHA256 76d0cc76005f661f6d4c6fb61799f59a8a9e72e74ded97f3f376dfd9b17daf26
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      NjRat-0.7D-main/NjRat.0.7D.Danger.Edition.zip
    • Size 15.8MB
    • SHA256 4b649c32035e383706673ffe6471d6c711989a206d6f96fdd905dda207a5f0cb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      GeoIP.dat
    • Size 1.2MB
    • SHA256 8a0675001b5bc63d8389fc7ed80b4a7b0f9538c744350f00162533519e106426
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Plugin/pw.rar
    • Size 325KB
    • SHA256 3b45b9a4541d8eb282efb8cf55dd5070b89b7fe7ac520c79901ca1b14df60e9d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Settings.ini
    • Size 15B
    • SHA256 17f547710bf4fefb27ff4470e0f78089c4888567eec25380e136d9fde1e02276
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      Stub.il
    • Size 1.2MB
    • SHA256 78a156fe7e6900ece45fdd25516c0f9ffeb2083ef3d62685f189fb5ef5a9a0a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Stub.manifest
    • Size 487B
    • SHA256 835a00d6e7c43db49ae7b3fa12559f23c2920b7530f4d3f960fd285b42b1efb5
    • MD5 SHA1 SHA512 TLSH
    • Target
      NjRat-0.7D-main/NjRat.0.7D.Golden.Edition.zip
    • Size 1.8MB
    • SHA256 aac5b302910be9b2c904f039129d3c42eb1e4b1539ef6de621669793a95c7e69
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      GeoIP.dat
    • Size 1.2MB
    • SHA256 8a0675001b5bc63d8389fc7ed80b4a7b0f9538c744350f00162533519e106426
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      README.md
    • Size 50B
    • SHA256 94472753f8a506fcfbb28d294af7b4f9ebbd878d274444d4fd588e2035f68533
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      stubs/Bsod.egg
    • Size 5B
    • SHA256 60a33e6cf5151f2d52eddae9685cfa270426aa89d8dbc7dfb854606f1d1a40fe
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      stubs/Exe.egg
    • Size 11B
    • SHA256 21a79c05c0f8307c51271987d8f78c2be7adc0ba1882cff03d9be82255e09dd5
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      stubs/Hide.egg
    • Size 5B
    • SHA256 60a33e6cf5151f2d52eddae9685cfa270426aa89d8dbc7dfb854606f1d1a40fe
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      stubs/Mpress.egg
    • Size 5B
    • SHA256 60a33e6cf5151f2d52eddae9685cfa270426aa89d8dbc7dfb854606f1d1a40fe
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      stubs/ReGKey.egg
    • Size 45B
    • SHA256 b8fa5aa5af1c96f87c35e32117364155dfab8f913fcd098b71f59888e0609154
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      stubs/Sound/Sound.wav
    • Size 23KB
    • SHA256 a76aa44b4924a960d020cc82c0e29e840f46fd81ec05c91ddbf4f42169ade4db
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      stubs/VN.egg
    • Size 6B
    • SHA256 417dacf7bc522f756571e33110ad80a23a17a16abea66fa1c004e91b5535140b
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      stubs/copy.egg
    • Size 5B
    • SHA256 60a33e6cf5151f2d52eddae9685cfa270426aa89d8dbc7dfb854606f1d1a40fe
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      stubs/dir.egg
    • Size 6B
    • SHA256 07f8b1a4dba9ee295d9af001e6859fd115c69f452d287fc6e6c0ec6ac49cafdd
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      stubs/host.egg
    • Size 9B
    • SHA256 12ca17b49af2289436f303e0166030a21e525d266e209267433801a8fd4071a0
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      stubs/regch.egg
    • Size 5B
    • SHA256 60a33e6cf5151f2d52eddae9685cfa270426aa89d8dbc7dfb854606f1d1a40fe
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      stubs/regname.egg
    • Size 14B
    • SHA256 d9bf5215fd3470cebfaa8f90e670edd92e2192d7561f0fb0563d54fcfa6efdbe
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      stubs/startupch.egg
    • Size 5B
    • SHA256 60a33e6cf5151f2d52eddae9685cfa270426aa89d8dbc7dfb854606f1d1a40fe
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      stubs/startupname.egg
    • Size 11B
    • SHA256 46237cbc19353167743677a80ab15a202877d968d907ecd4341ecae2cea2d3db
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      stubs/task.egg
    • Size 5B
    • SHA256 60a33e6cf5151f2d52eddae9685cfa270426aa89d8dbc7dfb854606f1d1a40fe
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      user.config
    • Size 93B
    • SHA256 4b811ec98b3799a6fa3ac12796768b8ca04a3acd26f8d78a3e6e159a346fd697
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      NjRat-0.7D-main/NjRat.0.7D.Green.Edition.zip
    • Size 2.2MB
    • SHA256 72029d0005d9b3130cdbdba3d6d6129a817f073b5eaedd79345729042e586a25
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      NjRat-0.7D-main/NjRat.0.7D.Lime.Edition.zip
    • Size 13.5MB
    • SHA256 bd247718429e52d8e49d1f2c36e339ba7ae8451f6dd08e9e93a2abe222df2159
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      NjRat-0.7D-main/NjRat.0.7D.Single.Edition.zip
    • Size 9.2MB
    • SHA256 902576f7f90174513a45bc82796b82c9264a57c82c0c72b7c9bf11e7da6bba96
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      NjRat-0.7D-main/README.md
    • Size 1KB
    • SHA256 223b34d4395b2af80c0dcba0dda3b176d9eaefed3526093259b3cb0f52c5f13d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

hackedtrojannjrat
Score
10/10

behavioral1

Score
1/10

behavioral2

execution
Score
3/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

execution
Score
3/10

behavioral6

Score
1/10

behavioral7

ransomware
Score
1/10

behavioral8

execution
Score
3/10

behavioral9

adwarediscoveryspyware
Score
3/10

behavioral10

Score
1/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

discovery
Score
6/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

execution
Score
3/10