njrat | 7c87f6a9e89603fc8398cc8dc598f74ed509c8058aafeab5f88b0a249549e813 | Triage™

Login
Reports

Overview

overview

Static

static

jaffacakes...ic.exe

windows10-2004-x64

jaffacakes...ic.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.41c1b309c26d7e5b0d597
Size 31KB
Sample261014-cs7dvaxtcs
SHA256 7c87f6a9e89603fc8398cc8dc598f74ed509c8058aafeab5f88b0a249549e813
MD5 17ac7c0d93a41c1b309c26d7e5b0d597
SHA1 7af41f196e8830370c48b06c376c46cee6f4444d
SHA512 65966b693f721a926621c38e29e498f1b517436d1cb1bb4e322cfde53f9e470b1c86023e14f003bcba9f4a3ec7a4310ff674301c7cf9d5aeaef6765a530476cb
SSDEEP 768:GXJEpBZhjzOzx5+R4s/Hu56HdAbiTinvaTQmIDUu0tiXAjj:9D6uukAbiT6oQVkEij
TLSH
T117E21BADFBEA4466D1BC0AB50671950013B4D103E523F77E4ECA24A62B6B7D84B84DF2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

njrat mybot defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

2 signatures

mybot trojan njrat

Behavioral task

behavioral1

Sample

jaffacakes118_HEUR.Trojan.Win32.Generic.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

6 signatures

150 seconds

defense_evasion discovery njrat persistence privilege_escalation trojan

Behavioral task

behavioral2

Sample

jaffacakes118_HEUR.Trojan.Win32.Generic.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

defense_evasion discovery njrat persistence privilege_escalation trojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

178.234.11.164:6522

Mutex

226ea452117b887a4b70cc2d6c47afe1

Attributes

reg_key
226ea452117b887a4b70cc2d6c47afe1
splitter
Y262SUCZ4UJJ

Targets

- Target
  jaffacakes118_HEUR.Trojan.Win32.Generic.41c1b309c26d7e5b0d597
- Size 31KB
- SHA256 7c87f6a9e89603fc8398cc8dc598f74ed509c8058aafeab5f88b0a249549e813
- MD5 17ac7c0d93a41c1b309c26d7e5b0d597
- SHA1 7af41f196e8830370c48b06c376c46cee6f4444d
- SHA512 65966b693f721a926621c38e29e498f1b517436d1cb1bb4e322cfde53f9e470b1c86023e14f003bcba9f4a3ec7a4310ff674301c7cf9d5aeaef6765a530476cb
- SSDEEP 768:GXJEpBZhjzOzx5+R4s/Hu56HdAbiTinvaTQmIDUu0tiXAjj:9D6uukAbiT6oQVkEij
- TLSH
  T117E21BADFBEA4466D1BC0AB50671950013B4D103E523F77E4ECA24A62B6B7D84B84DF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery njrat persistence privilege_escalation trojan
- Family: njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

mybottrojannjrat

behavioral1

defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan

behavioral2

defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan

© 2018-2026

Terms | Privacy