njrat | 90152994b0341b1aeb2b0dd35ed1cd093b2b563e8b9715ec307fdf435a49b90a | Triage™

Login
Reports

Overview

overview

Static

static

Server.exe

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
Server.exe
Size 37KB
Sample261101-sbmk4sc14n
SHA256 90152994b0341b1aeb2b0dd35ed1cd093b2b563e8b9715ec307fdf435a49b90a
MD5 db95ba7360bf84ad9ddb799156b3ea25
SHA1 a81409560b4f87462df8520e08cd8fbb0aaecce7
SHA512 1b3675aa3ed1c1673a7d025b8c9b48c25fb7d104d1e35542f7857fb33a12e0d4ba1a555a727fa5d85f96a2ef9f8e2b2b8b84ec94cc072b165a8d67ec4fd236f9
SSDEEP 384:F6Daio1L7S5pbpQyEfFqbUPzkYqgF+rAF+rMRTyN/0L+EcoinblneHQM3epzXONu:033pLEfsbUYlg4rM+rMRa8Nukwt
TLSH
T19D032A4D7FE18568C5FD0A7B05B2D41207BAE04B6E23D90E8EF6649A37636C18F50AF1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

njrat hacked defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

2 signatures

hacked trojan njrat

Behavioral task

behavioral1

Sample

Server.exe

Resource

win11-20260911-en

windows11-21h2-x64

6 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

engik-195-162-78-79.run.pinggy-free.link:46297

Mutex

47be6a289523e83d72170353128bac5f

Attributes

reg_key
47be6a289523e83d72170353128bac5f
splitter
|'|'|

Targets

- Target
  Server.exe
- Size 37KB
- SHA256 90152994b0341b1aeb2b0dd35ed1cd093b2b563e8b9715ec307fdf435a49b90a
- MD5 db95ba7360bf84ad9ddb799156b3ea25
- SHA1 a81409560b4f87462df8520e08cd8fbb0aaecce7
- SHA512 1b3675aa3ed1c1673a7d025b8c9b48c25fb7d104d1e35542f7857fb33a12e0d4ba1a555a727fa5d85f96a2ef9f8e2b2b8b84ec94cc072b165a8d67ec4fd236f9
- SSDEEP 384:F6Daio1L7S5pbpQyEfFqbUPzkYqgF+rAF+rMRTyN/0L+EcoinblneHQM3epzXONu:033pLEfsbUYlg4rM+rMRa8Nukwt
- TLSH
  T19D032A4D7FE18568C5FD0A7B05B2D41207BAE04B6E23D90E8EF6649A37636C18F50AF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

hackedtrojannjrat

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation

© 2018-2026

Terms | Privacy