Analysis
- max time kernel
149s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
16/09/2026, 07:35
General
- Target njRAT v0.9d/Stub/Stub ..exe
- Size 102KB
- Sample260916-jesf4avthy
- SHA256 e5e22e5bc3a90064b7ee98a99c35437b597ddfd1a34fa6f66125e1bd19677fe5
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Modifies registry class 2 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\njRAT v0.9d\Stub\Stub ..exe"C:\Users\Admin\AppData\Local\Temp\njRAT v0.9d\Stub\Stub ..exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2936-0-0x0000000001060000-0x0000000001070000-memory.dmp
memory/2936-1-0x0000000075122000-0x0000000075124000-memory.dmp