njrat | e7973f57a1172865da7f365ffaf788fc2fbac086f4ee84772921f29ae307213e

General

Target
njRat-M.a.H-main.zip
Size 6.0MB
Sample261106-w9mkjsz15p
SHA256 e7973f57a1172865da7f365ffaf788fc2fbac086f4ee84772921f29ae307213e
MD5 3090314560d3cea2f7eaaba53bc92df7
SHA1 a65ba5115b74bc82d1fb78f6644d8a49199401e9
SHA512 5886e2e138f223646103bccea033148124e53f127f463d29af69f5af91975988e1165f03b634048a590ad092d91ba3c5bf59f1ae57991a5dbb6bc2d27d0c7857
SSDEEP 98304:W+/0rwTOkDTwala7hRmQTf5YeuKG3jEvEtw1KmztOkU9KC4R5ZeD8kE8r0Su:WnrxalWzmQVY/F3jEGw11ztOzK9HZJzP
TLSH
T17A5633E36E8D109A48A2C0D675B46C02DDB5B6DEF6653AB330855B64FD0B4DAE23033D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed By Mr-Abu Hani

Mutex

9212c4b54e8f576a7b60a5356cd6d42a

Attributes

reg_key
9212c4b54e8f576a7b60a5356cd6d42a
splitter
|'|'|

Targets

- Target
  njRAT M.A.H/Builder.exe
- Size 284KB
- SHA256 15fccbc4ac549831d2e1ebcd84e66471dddc9454b149fc8b044013c2c0a6e59c
- MD5 1780e624bec6da8e201fd6eaadfcccdc
- SHA1 31e173363770fb12ce84c9b50fd55a6bba08a60c
- SHA512 05c901a2bdf894a95aefe8d4e68ab633c25c4d23bb26dea18f1da65a81aa4285f78df0bf41cca03374971a0587f090eb835a053536063fc2849fac235ed3cfb5
- SSDEEP 6144:uGYomIDQexUQ7EgJXe6rB5XOY6L1vUTlv9AQL7:uGecxUQIgJXDNMS
- TLSH
  T18954C31066A08E55F4BE32FAC451C93227B16E218A02D20E69F67F5BF8F7E43CD9514E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

hacked by mr-abu hani discovery njrat trojan
- Family: njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  njRAT M.A.H/NjRat Black.exe
- Size 5.9MB
- SHA256 79d9cf8d7cba6c6c6fd64f7384895a7db3130a9611137839ae51f866a568abfd
- MD5 6b54ff41b5716cfd0e354ac8d8d69925
- SHA1 24dbabe9716de411b4f8172a582faad04cca1594
- SHA512 9507534ba5462efb688bf374109b72b37706b91ba999e7c4d44de61d6de350418023fa5e9e18eeb6bcbd9d3606b47bd3f33e02552a16c8aa3950b50188a964c5
- SSDEEP 98304:pcBLXBxLOKMAntqJqmS6+BrLU9tbgBl65WwQ:pcNxVHMAcBZ8s8Bl2WwQ
- TLSH
  T1BA560623730AE884D8750FF056508AE588932C6E6531C2F905DD7B24F6F9EC9BE1A7C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral3 behavioral4
- Target
  njRAT M.A.H/njRAT M.A.H.exe
- Size 5.6MB
- SHA256 f5cb5289f0cd3411bec24a4577c00d86bce1ead89a4cbbc3fa1c8bab460f2730
- MD5 2e26a22af40730a6dccdca529dcf9c10
- SHA1 eb3fd4c171ca3a848eb247e26d1e02195de45c22
- SHA512 d7b6724428b4e419fb94847c4bddb6e3dd67e5195ae7c29ed0e8287cff5382b1bdff1061b60d17adff722a8f83ef642cd456646c9b29dcf3f1b6f7eec0364dce
- SSDEEP 98304:XRJBmu09trPhcBXPOv1t/t+5Wf6Brq61:hy7rhcpPOv1t/OW411
- TLSH
  T11756F613B309E884D8710FF11640CAF488965D4E5565C2F906D9BB20BAFDEC9BE1BBC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6