Overview
overview
10Static
static
10NjRat-0.7D-main.zip
windows10-2004-x64
1NjRat-0.7D...ICENSE
windows10-2004-x64
3NjRat-0.7D...ot.png
windows10-2004-x64
1NjRat-0.7D...on.zip
windows10-2004-x64
1GeoIP.dat
windows10-2004-x64
3Plugin/pw.rar
windows10-2004-x64
1Settings.ini
windows10-2004-x64
1Stub.il
windows10-2004-x64
3Stub.xml
windows10-2004-x64
3NjRat-0.7D...on.zip
windows10-2004-x64
1GeoIP.dat
windows10-2004-x64
3README.md
windows10-2004-x64
3stubs/Bsod.egg
windows10-2004-x64
3stubs/Exe.egg
windows10-2004-x64
3stubs/Hide.egg
windows10-2004-x64
3stubs/Mpress.egg
windows10-2004-x64
3stubs/ReGKey.egg
windows10-2004-x64
3stubs/Sound/Sound.wav
windows10-2004-x64
6stubs/VN.egg
windows10-2004-x64
3stubs/copy.egg
windows10-2004-x64
3stubs/dir.egg
windows10-2004-x64
3stubs/host.egg
windows10-2004-x64
3stubs/regch.egg
windows10-2004-x64
3stubs/regname.egg
windows10-2004-x64
3stubs/startupch.egg
windows10-2004-x64
3stubs/startupname.egg
windows10-2004-x64
3stubs/task.egg
windows10-2004-x64
3user.config
windows10-2004-x64
3NjRat-0.7D...on.zip
windows10-2004-x64
1NjRat-0.7D...on.zip
windows10-2004-x64
1NjRat-0.7D...on.zip
windows10-2004-x64
1NjRat-0.7D...DME.md
windows10-2004-x64
3Analysis
- max time kernel
598s - max time network
384s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/09/2026, 09:17
Behavioral task
behavioral1
Sample
NjRat-0.7D-main.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
NjRat-0.7D-main/LICENSE
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
NjRat-0.7D-main/NjRat-Screenshot.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
NjRat-0.7D-main/NjRat.0.7D.Danger.Edition.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
GeoIP.dat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Plugin/pw.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
Settings.ini
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Stub.il
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
Stub.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
NjRat-0.7D-main/NjRat.0.7D.Golden.Edition.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
GeoIP.dat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
README.md
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
stubs/Bsod.egg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
stubs/Exe.egg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
stubs/Hide.egg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
stubs/Mpress.egg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
stubs/ReGKey.egg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
stubs/Sound/Sound.wav
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
stubs/VN.egg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
stubs/copy.egg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
stubs/dir.egg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
stubs/host.egg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
stubs/regch.egg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
stubs/regname.egg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
stubs/startupch.egg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
stubs/startupname.egg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
stubs/task.egg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
user.config
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
NjRat-0.7D-main/NjRat.0.7D.Green.Edition.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
NjRat-0.7D-main/NjRat.0.7D.Lime.Edition.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
NjRat-0.7D-main/NjRat.0.7D.Single.Edition.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
NjRat-0.7D-main/README.md
Resource
win10v2004-20260513-en
windows10-2004-x64
General
- Target NjRat-0.7D-main/NjRat-Screenshot.png
- Size 735KB
- Sample260910-k9fapagd44
- SHA256 76d0cc76005f661f6d4c6fb61799f59a8a9e72e74ded97f3f376dfd9b17daf26
- MD5 620aca41c052f51a96afce52ccf26836
- SHA1 3ef77932215b3fcd7ba13b6eab912f87148c772f
- SHA512 60d6a6c674c749d9aa27ad750d2d87902a675d790c558f3b24df64dcbec05d427acf4c0e6cf81ca0b351c994dc3e82ea6a2d91e32052237d2798a7090452fd36
- SSDEEP 12288:x6L3+qJ0/TK4CtBZNF5IFWQzvyffM3Y+PetZfIVDmXPP156SuH/QK:4LuU0/TitPa0Mvy3M3Y+uhIV6XP7A/N
- TLSH T1AFF423496CF4E3650FA3907E05DDDF139923B3983AEBB84CD798D84D5A02D25E4A384A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4204 mspaint.exe 4204 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4204 mspaint.exe 4204 mspaint.exe 4204 mspaint.exe 4204 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\NjRat-0.7D-main\NjRat-Screenshot.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4204
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:3768