njrat | cad07ccf6f758acd4cfdddd79fe5b5b58af8a73574e9f48a2777902b751ce920 | Triage™

Login
Reports

Overview

overview

Static

static

Sysdll.exe

windows10-2004-x64

8

Sysdll.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
Sysdll.dll
Size 37KB
Sample260924-jzt6eshd34
SHA256 cad07ccf6f758acd4cfdddd79fe5b5b58af8a73574e9f48a2777902b751ce920
MD5 0c3ee1c43e4107117ed83f573b279081
SHA1 ca4a020ce9a62f55ef30a066e87d47a553e8901b
SHA512 50d994d444e4caaec26bd93061e0686c7b7241b6dbbf0d23966e505982bb8bdd99f81bba179f40f0b9d20b46e9caa9697a16cacaa837271650d9802cdd0a5ee6
SSDEEP 384:i6l+yw7BeAaXaEiVbzdmB0O4yUvNixgp+Z2v/RYJ/oM6IMrAF+rMRTyN/0L+Eco2:/cyw79POTUvNZYv6trM+rMRa8Nu1Pt
TLSH
T1F6033A4D7FE18168C4FD067B05B2E412077AE04B6E23D90E9EE564AA37236C58F50EF2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

njrat hacked defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

2 signatures

hacked trojan njrat

Behavioral task

behavioral1

Sample

Sysdll.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Behavioral task

behavioral2

Sample

Sysdll.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

kycb.ddns.net:6556

Mutex

19db8209f2448cb7a168ff88cd85fe3c

Attributes

reg_key
19db8209f2448cb7a168ff88cd85fe3c
splitter
|'|'|

Targets

- Target
  Sysdll.dll
- Size 37KB
- SHA256 cad07ccf6f758acd4cfdddd79fe5b5b58af8a73574e9f48a2777902b751ce920
- MD5 0c3ee1c43e4107117ed83f573b279081
- SHA1 ca4a020ce9a62f55ef30a066e87d47a553e8901b
- SHA512 50d994d444e4caaec26bd93061e0686c7b7241b6dbbf0d23966e505982bb8bdd99f81bba179f40f0b9d20b46e9caa9697a16cacaa837271650d9802cdd0a5ee6
- SSDEEP 384:i6l+yw7BeAaXaEiVbzdmB0O4yUvNixgp+Z2v/RYJ/oM6IMrAF+rMRTyN/0L+Eco2:/cyw79POTUvNZYv6trM+rMRa8Nu1Pt
- TLSH
  T1F6033A4D7FE18168C4FD067B05B2E412077AE04B6E23D90E9EE564AA37236C58F50EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

hackedtrojannjrat

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation

behavioral2

defense_evasiondiscoverypersistenceprivilege_escalation

© 2018-2026

Terms | Privacy