d665b09d75102b611905cd1c9d61bbcca64a03af62c218d4cac1289fa74ec3d0

Sharing

Copy URL Twitter E-mail

General

Target
njRAT v0.9d.rar
Size 5.1MB
Sample260928-3154vsxtdw
SHA256 d665b09d75102b611905cd1c9d61bbcca64a03af62c218d4cac1289fa74ec3d0
MD5 dd3783c0cba6f7ab11eb0e7f933e3de7
SHA1 631f1b9fe2481570f7b733b6f4c332ccbefbf212
SHA512 41765282d0d81b6b2303cfc80b4dc66e862b0f845d8b3343db820421db2c2539cbe0a10c00a901baa061051f99e8b1491133400675b709b69b311169ddc448e7
SSDEEP 98304:60h4uv46R34LaDH8y+BUBYpRawzyGTC62GXPnSGAl2JW60b3YfhE2GXPnSGAlH:6+4ERILaDHZ4M8y0C4XPwgJ8bK0XPwh
TLSH
T1FC4633DBACC6B397DB33202407165E5E316CB942CDB250584AD4B399B6685FE1F03BB8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  njRAT v0.9d/DevComponents..dll
- Size 4.9MB
- SHA256 fac9e23262e1ce98746c47da786720a4137c3cd0857ddd96cdc78a218137efb5
- MD5 fa4aaf6ecb9d9a8163af9e0392c35e93
- SHA1 d1b73cefec8658fa3dfa036b18352f7fc0abc446
- SHA512 a3727df00ab016ce74a487258401ed1bbef17b1c6dc4cfa9eb724e94720b547e8c4cec1d908b3e78b78ed6500f87f38c045bff527c9d23fb68db1c96c9f23822
- SSDEEP 49152:TfbOajjkPV5M6BEng14kVsAtLMu5fnChs/V7aqONj9o0eXDRNnxfJtqUrSPNk/0R:WajjQ5M6Bcg1uAt3/VuqON
- TLSH
  T1F2367D22B7FC8D3FE06E477A8129465443F8CA56F392FBE6168571B43D627108D1B2A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  njRAT v0.9d/DevComponents.DotNetBar2.dll
- Size 4.9MB
- SHA256 fac9e23262e1ce98746c47da786720a4137c3cd0857ddd96cdc78a218137efb5
- MD5 fa4aaf6ecb9d9a8163af9e0392c35e93
- SHA1 d1b73cefec8658fa3dfa036b18352f7fc0abc446
- SHA512 a3727df00ab016ce74a487258401ed1bbef17b1c6dc4cfa9eb724e94720b547e8c4cec1d908b3e78b78ed6500f87f38c045bff527c9d23fb68db1c96c9f23822
- SSDEEP 49152:TfbOajjkPV5M6BEng14kVsAtLMu5fnChs/V7aqONj9o0eXDRNnxfJtqUrSPNk/0R:WajjQ5M6Bcg1uAt3/VuqON
- TLSH
  T1F2367D22B7FC8D3FE06E477A8129465443F8CA56F392FBE6168571B43D627108D1B2A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  njRAT v0.9d/Mono.Cecil.dll
- Size 305KB
- SHA256 cdadc26c09f869e21053ee1a0acf3b2d11df8edd599fe9c377bd4d3ce1c9cda9
- MD5 851ec9d84343fbd089520d420348a902
- SHA1 f8e2a80130058e4db3cf569cf4297d07d05c93e0
- SHA512 5e1d1b953fda4a905749eff8c4133a164748ba08c4854348539d335cf53c873eae7c653807a2701bf307693a049ae6c523bd1497a8e659bdea0a71085a58a5f1
- SSDEEP 6144:ueMQM/aMOZabe3h1PtRjAqmYVNf3yTXcYBbt6KMBhu:uF/aMDb8BtRjA7XcYNclB
- TLSH
  T1D46429185AEC5B3ADD6F97BFD0E6581183B0F0126643E30E4BE4B2B22CB3761C95255B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  njRAT v0.9d/NJRAT/PEPSI-C.dll
- Size 63KB
- SHA256 b02c56d29447690cdafd8f2f6877d526d1f6efcaae74017719c460d9b3ee38b8
- MD5 0a1ca904b3d688c01f4e5faae811922b
- SHA1 143a3d4a5865c59926b49add4d596c6fc3e1a797
- SHA512 fdf9b6a6d8ed0f2443907923dcfba6401145ee377454e196ccd057e9ae126d7e66b2607d9c4ed95bbfbdb26321904cd72ed052c3cd8d942785f12f340a864424
- SSDEEP 1536:srUlse2ToVMjLb6M0VqSep+cx4sDEl3N6:OyP+b6MMBep+cx5DET6
- TLSH
  T1C853296A5794610AC28D57BC90B30F0007F0CA5AA313EF4AAB7951BCDDB63918B4779B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  njRAT v0.9d/NJRAT/PEPSI-CH.dll
- Size 13KB
- SHA256 89a1bbe42cde01ddfe531d69dd6ea6575296096010400cb63cbf4999eca52e52
- MD5 1cb8fa647355805f2ae6a7e6bb71b138
- SHA1 f9ab8ab8ea532775023338ce10ae3423c8aabb1b
- SHA512 acf6a42b9e8634f9bf5f4eac01d10d92ec5ef1eeddfb9432cda020cd76e11abf1fd1b5091c5a28bcb9c100f122a1e9026d33b0af833dd603f87cabb37f495517
- SSDEEP 192:aX33uVlADj04riZXNZhNQmPrXxRESnsB3nsZn3oUMOtpsl1vO8:M33uVlAX04O9T4qQSnslsZn3ohQ+ZO8
- TLSH
  T19552C52673949F23C96C67BD81A2824127F2D6198313DF5FBCD8A1FA5DE2380671038B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  njRAT v0.9d/NJRAT/PEPSI-F.dll
- Size 13KB
- SHA256 f132324acf09c0562a1cad1288bfb4021bd991659126d21ecb9499938bf6acb3
- MD5 51c2ee936ded2e55f8bcc8cba6e3b330
- SHA1 1887396650202fc9e10d1044dc40322b2ab46b52
- SHA512 8bf5d473523d1e018b1f3b557104574d314459b2856152f9f25e393ce2128e92fd101465c9ab96053fde43b1c18b8cb31df0af2cebb6fb284da632a60a097e09
- SSDEEP 192:dNc2iE9ZflPFFiydLz/GQYehDnGUx99Lg5Pjxns0cmd3dMtsl:U2xFi2LTfx96Fs0cmd3dMtE
- TLSH
  T17D52621DAA94CD03C96D577541EE9305ABF38D0A0512E67F8CC918FB4E2A3C46B58BC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  njRAT v0.9d/NJRAT/PEPSI-R.dll
- Size 8KB
- SHA256 951e537ca810ad5db1b13ecf092d18cfab3001feb266eb33a371c5dd5e3b5b29
- MD5 0b2f09f5e4c2b9b94f2fc54bbeb509a5
- SHA1 4ffed5b181c2c7ad4aac91b9579b8aaf4af6a743
- SHA512 133bd06116f7ec3275c7bbcba013131619322bcfce9f6bba7604c188d2bdb9d086a1c1823d527f4ee315eba037d6e7d3588eabddce2fae637ff1793d77b8d2a5
- SSDEEP 96:GNco4yQ+u1B8LqOHLkmzTOfFjRt0ouLznBnafrGl+MiqNM8Tnj/+OSXdWpdJmv:GNcZ+LqOhGfJkLL4il++NMKnYydJ
- TLSH
  T13C02401FABA85912C6AC077E48A243096FF382170213DB7F5CC5F8E66F9A3D45634B46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  njRAT v0.9d/NJRAT/PEPSI-S.dll
- Size 10KB
- SHA256 e728afc5d081eaabe3297d0ddd8387d0df0bbed0f73ee3b04c4588cb89efea51
- MD5 70ac2237257012e013331e749d42a70b
- SHA1 5d20a81ed91518717a2f8e1753557449432f70b2
- SHA512 703f434cd3691235c030e1155bacd70fc1f42fea40e7d53901dd8d50fabffa3f8dc9dbde912084c6f74649643f6942bca7699e0cf19d6aea4aa6d27ea433531d
- SSDEEP 192:0zMMbux7bdhJadzoQweyYahwenJZYan2rtEB:/3TJaWQwbYahwyJZ3i
- TLSH
  T13022B719B768CB57E56C57BD98D7535313B2C22A8307FB6F4CC868F93CA77850A0128A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  njRAT v0.9d/NJRAT/pw.dll
- Size 39KB
- SHA256 a3e4bee1b6944aa9266bd58de3f534a4c1896df621881a5252a0d355a6e67c70
- MD5 db87daf76c15f3808cec149f639aa64f
- SHA1 d67f84a44ddc25432ce179aeba9cff778af746ee
- SHA512 ad7dc75254180ff7c988b7f394ad76b696384002457d558469d2c6401dd97cba54c532245bb555ab28d2beda3ab504736bb2b89040a21ba6598929392daab473
- SSDEEP 768:fqcFOkBO3jzamnEjt0Wp8em0nktiwRnKSg42+:fvg3jumny0Wp8em08NBgG
- TLSH
  T10F037D067BC69301EABD8FB51CB281444372D28F5D13E79E1CE988F42B76B900955BEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  njRAT v0.9d/Notificação.dll
- Size 28KB
- SHA256 e490580642f1fb434fa82cff519a67e2c946ab6b1a996b7548090efa880d1a2f
- MD5 d829e5b1c0b11de40392ca48119579f1
- SHA1 cbebbfb4550ee58220bc9e1bececcc6ac26d7667
- SHA512 0fbbc283ab455c71c67fca0d08036c7b75829182245f1e25cc786f2d7e8195751a4eb5f6985cd604a17ea3753ac9126c9b09c7965a14e4e358033bae0cbb35cf
- SSDEEP 384:QEB8TCduPEuokwNwAmkTDB+7HKNUaycIRByyanHCFUOFPwzPwLPwpPwJPwqnPwgz:ReYB++NUnBB36HVOhq4D7
- TLSH
  T1C8D23A29373D873BC9BECF79D00211454BBAE6467903EBA88F9050CA65D73A885032DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  njRAT v0.9d/Stub/Stub ..exe
- Size 73KB
- SHA256 a984bb9d8063470b8645d85b8e004ee290b9e5707644f668d632c5da627d3f9f
- MD5 829b80f55deb41d6adaf37f3b81bdc3a
- SHA1 dfe2b4fc79e79d2b8b09057130d7de191ff5bed9
- SHA512 9c668c360c3b9caab2e2546a679f9c1a36ed0fba758cf1ca3a85b8ed708db6bbb69a284dff20272f5f7b28df6b31ee95719a8be5c240b4e444666c2f9dae3017
- SSDEEP 768:K77KxHRv1h4XAV/GEt7aaR9oW9Uw1NjM7qpSNONhit0DAA2tO4JzYcHeUZ:K+HRv1GO/nXKW9TM7JN4hiP84YU
- TLSH
  T10C73198EA3D44914E1BD3BB72872B20647B0F45B9A12D79F4DD9C4E93F7B240CE81296
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  njRAT v0.9d/WinMM.Net.dll
- Size 43KB
- SHA256 59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46
- MD5 d4b80052c7b4093e10ce1f40ce74f707
- SHA1 2494a38f1c0d3a0aa9b31cf0650337cacc655697
- SHA512 3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450
- SSDEEP 768:LyasDzF2TDSemqD9tGI+ffwj2Au0LVpqmf7KxcOOrYCPTxqPb85:LyaXKemqD9tGI+ffwj2Au0LVpq4KWrlv
- TLSH
  T1EB13B60479A85CB9CB2F013D6CD61211FAB18D647227B62B1CBE70F318977DE9A41AF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  njRAT v0.9d/nj RAT.exe
- Size 2.7MB
- SHA256 629fcf97c3801bde2c792d60e3859c63c4ab7c15a5f07a050beb3bd32d41d821
- MD5 285611f9780e484cedeb1f6f7e60e8de
- SHA1 e09b556b96e9587d62b56761e334ef8915721959
- SHA512 3102e4521d97d07243b5602143ed553356281224c4c5a58b2e43809bd09cf5f9a6970e916f50c657984bdd1e2593ea9beb069f7bac90f8f6e6d49bacddd6e293
- SSDEEP 49152:aeomjvUXktksJVEZsI6zBCHH/rxSKHZEJRH/yMo7tY:aUh2sJKviBE
- TLSH
  T1F0D5A30335805D89F13837F28808CB745365AF685222A62E65F73E5BFAE7ED2AD417C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26