ea07bf41c9de37edd21abb50d5045e8aa86176acf4ddca07f0d2b6bfb911e1b7 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

server.exe

windows10-2004-x64

8

server.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
Njrat.rar
Size 14KB
Sample260913-rgrxcaztht
SHA256 ea07bf41c9de37edd21abb50d5045e8aa86176acf4ddca07f0d2b6bfb911e1b7
MD5 d9989639d6d5d9c4d0b99f420c19a3a2
SHA1 e01fe7606d98b06e3e7c766adcb9c941b74e5dde
SHA512 ae57733495fdd17d88c1fb5d9b791bb1e6d5fbe874430a0e9cb1561e0b1043ac811b47f9d15c63c0f7ccb2182b9a0271d652116c950fab2e8652a8033f820e49
SSDEEP 192:3qkqpAFNkwJ7bPWB0hvJuBlJ5esUZynRe/iyyiegaT10zpxtZeeB/+KgkDgQNZBc:arAFNkQqcwR9niIhT10tJeeB6k9fXs
TLSH
T1BD62C0C56E1F5E922C216AFB78AFF592F02B3F5C019D092123413B0DA253C7E5ED1A55
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

server.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Behavioral task

behavioral2

Sample

server.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Malware Config

Targets

- Target
  server.exe
- Size 32KB
- SHA256 2c86db47e87ab597929a047c5b6c9d0d851ed10c954ac188c6191d1f24470725
- MD5 70d8c83ebbc68e22f9b6ab62901508eb
- SHA1 11ccaa6fc336bc13a8f6617546a7e17558dae059
- SHA512 ff579ada91ceae541d032da8fa73691b7b0e9ce87da179e257f0c1e55f9953873a32dd64e0446478075edf1fdf81820f0e9874c9e162e8268ae89103c614ef89
- SSDEEP 768:GBwN/ZVwBM0UcncbwndwkJIw3ccrfLTmr:9a6cc8G4Iw3cafHmr
- TLSH
  T1BCE2F94D73A48A23C6BE47B84E70954247F1814B5512EFAF8EC560DA1EA7BE41E00EF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation

behavioral2

defense_evasiondiscoverypersistenceprivilege_escalation

© 2018-2026

Terms | Privacy