Analysis
- max time kernel
26s - max time network
52s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
- submitted
30/09/2026, 01:40
General
- Target njRAT-All-Versions-master/Dangerous RAT/Plugin/AN.exe
- Size 15KB
- Sample260930-b3vmcsxekf
- SHA256 3120498168f968b2e7a3f44ef09b9c2e99da6b3dd64b1728df20f873297b7431
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\njRAT-All-Versions-master\Dangerous RAT\Plugin\AN.exe"C:\Users\Admin\AppData\Local\Temp\njRAT-All-Versions-master\Dangerous RAT\Plugin\AN.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/648-0-0x00007FF9A0215000-0x00007FF9A0216000-memory.dmp
memory/648-1-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-2-0x000000001B9F0000-0x000000001BA96000-memory.dmp
memory/648-3-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-4-0x000000001BF90000-0x000000001C45E000-memory.dmp
memory/648-5-0x000000001C5B0000-0x000000001C64C000-memory.dmp
memory/648-6-0x0000000001350000-0x0000000001358000-memory.dmp
memory/648-7-0x000000001C710000-0x000000001C75C000-memory.dmp
memory/648-8-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-9-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-10-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-11-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-12-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-13-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-14-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-15-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-16-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-17-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-18-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-19-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-20-0x00007FF9A0215000-0x00007FF9A0216000-memory.dmp
memory/648-21-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-22-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-23-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-24-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-25-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-26-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-28-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-27-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-29-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-30-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-31-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-32-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-33-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-34-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-35-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-36-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp
memory/648-37-0x00007FF99FF60000-0x00007FF9A0901000-memory.dmp