njrat | 360c9fbad63300f5821e0fcf587e2a66dbc9e9dacc5ad5614a3f8bc0e8bdd4be | Triage™

Login
Reports

Overview

overview

Static

static

Serverr.exe

windows10-2004-x64

Serverr.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
Serverr.exe
Size 23KB
Sample260916-mrrbcaxsa1
SHA256 360c9fbad63300f5821e0fcf587e2a66dbc9e9dacc5ad5614a3f8bc0e8bdd4be
MD5 00fc54ddc93627cfa11eab740fe60277
SHA1 cc828582fd91e03176a6aff56e4d9b9bbf585f69
SHA512 6a29ebfad29ae51c03b9a0bb948f00ab6b1956873d921f428e2cf95729027a625cdb711fb405659fbeba7c1c4f3bf8e2e139e9a92dec93d1ee4e0a8a6928d3c8
SSDEEP 384:1oWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZqR:67O89p2rRpcnu1
TLSH
T15CB21A4E3FA9C856C4BC177486A6965043B0E1470423EE2FCDC560DBAFA3AD91D4CAF9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

njrat hacked defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

2 signatures

hacked trojan njrat

Behavioral task

behavioral1

Sample

Serverr.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

defense_evasion discovery njrat persistence privilege_escalation trojan

Behavioral task

behavioral2

Sample

Serverr.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

defense_evasion discovery njrat persistence privilege_escalation trojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

192.168.1.57:81

Mutex

2fa325260e408a8cbd6dda6e26cf8db2

Attributes

reg_key
2fa325260e408a8cbd6dda6e26cf8db2
splitter
|'|'|

Targets

- Target
  Serverr.exe
- Size 23KB
- SHA256 360c9fbad63300f5821e0fcf587e2a66dbc9e9dacc5ad5614a3f8bc0e8bdd4be
- MD5 00fc54ddc93627cfa11eab740fe60277
- SHA1 cc828582fd91e03176a6aff56e4d9b9bbf585f69
- SHA512 6a29ebfad29ae51c03b9a0bb948f00ab6b1956873d921f428e2cf95729027a625cdb711fb405659fbeba7c1c4f3bf8e2e139e9a92dec93d1ee4e0a8a6928d3c8
- SSDEEP 384:1oWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZqR:67O89p2rRpcnu1
- TLSH
  T15CB21A4E3FA9C856C4BC177486A6965043B0E1470423EE2FCDC560DBAFA3AD91D4CAF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery njrat persistence privilege_escalation trojan
- Family: njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  defense_evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

hackedtrojannjrat

behavioral1

defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan

behavioral2

defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan

© 2018-2026

Terms | Privacy