njrat | b86f2823c5226f32cedacb37d20e873a5b78d55251b4e8c3e1d62d825876cc73 | Triage™

Login
Reports

Overview

overview

Static

static

Server.exe5.exe

windows10-ltsc_2021-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
Server.exe5.exe
Size 37KB
Sample261023-s95jksdb78
SHA256 b86f2823c5226f32cedacb37d20e873a5b78d55251b4e8c3e1d62d825876cc73
MD5 55a91598da6b766742d91c7af9796cd5
SHA1 3d1464d9b1d865942b91052bc1931601a5ff3a32
SHA512 c19ccf7263d03ba3a5675edced71732d464769a4be145f8dd5d0d6cea4dffa43d939b59d15eea2dd0857629250ff74a2160dd202d275356396739af42bbebec1
SSDEEP 384:gqGeoixJhl7OHg1WykrppPl48uiX60rAF+rMRTyN/0L+EcoinblneHQM3epzXxNu:pG+R1NkrppqFidrM+rMRa8NurQt
TLSH
T12A033B4D7FE18168C4FE4A7B05B2D41207BAE04B6E23D91E8EF5649A37635C18F50AF2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

njrat hacked defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

2 signatures

hacked trojan njrat

Behavioral task

behavioral1

Sample

Server.exe5.exe

Resource

win10ltsc2021-20260911-en

windows10-ltsc_2021-x64

11 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

m7mnga-38338.portmap.host:38338

Mutex

b0baa07605ecfbab6c2c709f823ad103

Attributes

reg_key
b0baa07605ecfbab6c2c709f823ad103
splitter
|'|'|

Targets

- Target
  Server.exe5.exe
- Size 37KB
- SHA256 b86f2823c5226f32cedacb37d20e873a5b78d55251b4e8c3e1d62d825876cc73
- MD5 55a91598da6b766742d91c7af9796cd5
- SHA1 3d1464d9b1d865942b91052bc1931601a5ff3a32
- SHA512 c19ccf7263d03ba3a5675edced71732d464769a4be145f8dd5d0d6cea4dffa43d939b59d15eea2dd0857629250ff74a2160dd202d275356396739af42bbebec1
- SSDEEP 384:gqGeoixJhl7OHg1WykrppPl48uiX60rAF+rMRTyN/0L+EcoinblneHQM3epzXxNu:pG+R1NkrppqFidrM+rMRa8NurQt
- TLSH
  T12A033B4D7FE18168C4FE4A7B05B2D41207BAE04B6E23D91E8EF5649A37635C18F50AF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

hackedtrojannjrat

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation

© 2018-2026

Terms | Privacy