njrat | 363587902c1c8bed265b49417c6888c1d9ae4e017226892b22ef751d2cfcae89 | Triage™

Login
Reports

Overview

overview

Static

static

Clienthh.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
Clienthh.exe
Size 31KB
Sample261031-xaablsft6n
SHA256 363587902c1c8bed265b49417c6888c1d9ae4e017226892b22ef751d2cfcae89
MD5 a753764caa7f5ee413d80d90e283d7c0
SHA1 839e3b26ac618e7a58000f717c1b0d11ce5f0de8
SHA512 0e13f939ca566cfc3197b69ceeeb73bc5cbfe0928a7993f00316cde90b493088027d73172720937420bf4372e3c5ac8ad4be5cde76ac288fda230643e3dfa267
SSDEEP 768:MnZghV5VXPKzxF+dt+XKvJ+rvaPQmIDUu0ti3/j:ffqciMQVkSj
TLSH
T128E22BADFBE64466D1BD1AB50571950017B4D003E523F77E8ECA24E62B2B7C84B88DF2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

njrat mybot defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

2 signatures

mybot trojan njrat

Behavioral task

behavioral1

Sample

Clienthh.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

9 signatures

900 seconds

defense_evasion discovery njrat persistence privilege_escalation trojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

108.27.163.4:8080

Mutex

4803f90ef000cb08102a199071c0aaf6

Attributes

reg_key
4803f90ef000cb08102a199071c0aaf6
splitter
Y262SUCZ4UJJ

Targets

- Target
  Clienthh.exe
- Size 31KB
- SHA256 363587902c1c8bed265b49417c6888c1d9ae4e017226892b22ef751d2cfcae89
- MD5 a753764caa7f5ee413d80d90e283d7c0
- SHA1 839e3b26ac618e7a58000f717c1b0d11ce5f0de8
- SHA512 0e13f939ca566cfc3197b69ceeeb73bc5cbfe0928a7993f00316cde90b493088027d73172720937420bf4372e3c5ac8ad4be5cde76ac288fda230643e3dfa267
- SSDEEP 768:MnZghV5VXPKzxF+dt+XKvJ+rvaPQmIDUu0ti3/j:ffqciMQVkSj
- TLSH
  T128E22BADFBE64466D1BD1AB50571950017B4D003E523F77E8ECA24E62B2B7C84B88DF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery njrat persistence privilege_escalation trojan
- Family: njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  defense_evasion
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Peripheral Device Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Video Capture

Command and Control

Exfiltration

Impact

Tasks

static1

mybottrojannjrat

behavioral1

defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan

© 2018-2026

Terms | Privacy