njrat | 2e91e762515d1f90816717f7906a48d26f2209b95a712320cbbd636e62d65170 | Triage™

Login
Reports

Overview

overview

Static

static

Server.exe

windows10-2004-x64

Server.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
Server.exe
Size 24KB
Sample261031-gbb9lahs8z
SHA256 2e91e762515d1f90816717f7906a48d26f2209b95a712320cbbd636e62d65170
MD5 3295e02d373f0b01701b5a9bae12507d
SHA1 401d33d557aee65ff712dd675d75eedbaf8666bc
SHA512 38ec6a73bf2118ed7b29ee4c2a89ef70e1b2f729ff051ee31b576192562188686b4f4d6f93f8d0bb9841290788ebd0a7f1ada82b0cd1fa4ce1ce5212487ad326
SSDEEP 384:xiURxJTt/6ECAaWhy/DHNCZElrP10FZWtqO7ctJNl/R3G0CTC2PIkUPeZmN:xx5tCqxybsU71cWtqO7OZBEVxUPeZM
TLSH
T167B206867BEA4630C2BD1AB489B3232542B9E7878422C75F4CCD50CF6AA77D45640EE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

njrat hacked defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

2 signatures

hacked trojan njrat

Behavioral task

behavioral1

Sample

Server.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

600 seconds

hacked defense_evasion discovery njrat persistence privilege_escalation trojan

Behavioral task

behavioral2

Sample

Server.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

7 signatures

600 seconds

hacked defense_evasion discovery njrat persistence privilege_escalation trojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

Mutex

83a3837a6c139305760793fcff1564d7

Attributes

reg_key
83a3837a6c139305760793fcff1564d7
splitter
|'|'|

Targets

- Target
  Server.exe
- Size 24KB
- SHA256 2e91e762515d1f90816717f7906a48d26f2209b95a712320cbbd636e62d65170
- MD5 3295e02d373f0b01701b5a9bae12507d
- SHA1 401d33d557aee65ff712dd675d75eedbaf8666bc
- SHA512 38ec6a73bf2118ed7b29ee4c2a89ef70e1b2f729ff051ee31b576192562188686b4f4d6f93f8d0bb9841290788ebd0a7f1ada82b0cd1fa4ce1ce5212487ad326
- SSDEEP 384:xiURxJTt/6ECAaWhy/DHNCZElrP10FZWtqO7ctJNl/R3G0CTC2PIkUPeZmN:xx5tCqxybsU71cWtqO7OZBEVxUPeZM
- TLSH
  T167B206867BEA4630C2BD1AB489B3232542B9E7878422C75F4CCD50CF6AA77D45640EE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

hacked defense_evasion discovery njrat persistence privilege_escalation trojan
- Family: njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

hackedtrojannjrat

behavioral1

hackeddefense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan

behavioral2

hackeddefense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan

© 2018-2026

Terms | Privacy