njrat | 2e323d36e73bd707f20404af5f7ae3b3d1f7c31e0d8c299881193077903a2505 | Triage™

Login
Reports

Overview

overview

Static

static

1234503.exe

windows10-2004-x64

8

1234503.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
1234503.rar
Size 16KB
Sample260912-xfbfvssflh
SHA256 2e323d36e73bd707f20404af5f7ae3b3d1f7c31e0d8c299881193077903a2505
MD5 7a4cf2e519ec3a912f0fdfd1bb290bce
SHA1 3cca67d82e3fe69bb2624aeccc33d34c0109e81f
SHA512 4ecac8f71376cdc9383bc5a6ddd416eac759d71f4991c3926c81d129b221a596e2833a5b696a9e7cdd3bbf90a9b6ad102f1e522d96cdc3109bcd9719fc9ddd44
SSDEEP 384:957URRz4GdNE32yHrN2cWM936lPagU4aMG6gyB0o1zeaBWp:UkeRyHrmeobMkWp
TLSH
T15B72D0F58EC2191841EEF2CB9879004BDD913861ED2B7B3AB51382096CF8E2EF035395
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

njrat hacked defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

2 signatures

hacked trojan njrat

Behavioral task

behavioral1

Sample

1234503.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Behavioral task

behavioral2

Sample

1234503.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

165d6ed988ac1dbec1627a1ca9899d84

Attributes

reg_key
165d6ed988ac1dbec1627a1ca9899d84
splitter
|'|'|

Targets

- Target
  1234503.exe
- Size 37KB
- SHA256 a751af0549120929d027aed056a5b725ed4fb7b4563b664631ce3eb7d7cac3c5
- MD5 d5a8132ee00a42a1e74e7785ab799262
- SHA1 8d035fab65b28127e0fb3dd601592c0353cd562e
- SHA512 b3f41d256eac807d862b3e67407d79844b93acb3cc5ec4fd6a1af4f07853f3c0cbb86a3601893198752426333b1ed0a8efe7a5a75b083f8d9d0fe88d3c319c5b
- SSDEEP 384:LKjoUiFebK7FmpE8QyEfuifpefHCwSrAF+rMRTyN/0L+EcoinblneHQM3epzXoNX:mt2n8LEfuiAvCzrM+rMRa8NuKbt
- TLSH
  T14C033A4D7FE181A8C5FD057B05B2D01207BAE04B6E23D91E8EF564DA37636C58B50AF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

hackedtrojannjrat

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation

behavioral2

defense_evasiondiscoverypersistenceprivilege_escalation

© 2018-2026

Terms | Privacy