njrat | 6b7ece115e29834acb4dc498ed319c2481551d740692154a8139b7973a4eac26 | Triage™

Login
Reports

Overview

overview

Static

static

Dad.exe

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
Dad.exe
Size 36KB
Sample261112-e172fsdz8l
SHA256 6b7ece115e29834acb4dc498ed319c2481551d740692154a8139b7973a4eac26
MD5 ce49bde6a80faf20683a1acb61607126
SHA1 78ca547a394345ea2152c11af7073ea225a737dd
SHA512 23bde6c9c3d935c9a54f6a0e073c78f262246ee56569b1ba23afaca6b5ec7f9c3a4bc75e464450933384859a2939d227004cdb0e9894b993990e9c6f9e018e9b
SSDEEP 384:CmOs0IiejvCVLO309QmykrtG+dA+VfwvOSifrAF+rMRTyN/0L+EcoinblneHQM3M:MFdGdkrgYRwWS0rM+rMRa8NuOqt
TLSH
T147F2294D7BE181A8C4FE167B05B2D4130777E04B5E23DD0D8EE6A4EA37236D18B54AE2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

njrat hacked defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

2 signatures

hacked trojan njrat

Behavioral task

behavioral1

Sample

Dad.exe

Resource

win11-20260911-en

windows11-21h2-x64

12 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

25.tcp.cpolar.top:13745

Mutex

d6e202ca499ba5170444e5de9ca1fd9c

Attributes

reg_key
d6e202ca499ba5170444e5de9ca1fd9c
splitter
|'|'|

Targets

- Target
  Dad.exe
- Size 36KB
- SHA256 6b7ece115e29834acb4dc498ed319c2481551d740692154a8139b7973a4eac26
- MD5 ce49bde6a80faf20683a1acb61607126
- SHA1 78ca547a394345ea2152c11af7073ea225a737dd
- SHA512 23bde6c9c3d935c9a54f6a0e073c78f262246ee56569b1ba23afaca6b5ec7f9c3a4bc75e464450933384859a2939d227004cdb0e9894b993990e9c6f9e018e9b
- SSDEEP 384:CmOs0IiejvCVLO309QmykrtG+dA+VfwvOSifrAF+rMRTyN/0L+EcoinblneHQM3M:MFdGdkrgYRwWS0rM+rMRa8NuOqt
- TLSH
  T147F2294D7BE181A8C4FE167B05B2D4130777E04B5E23DD0D8EE6A4EA37236D18B54AE2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Video Capture

Command and Control

Exfiltration

Impact

Tasks

static1

hackedtrojannjrat

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation

© 2018-2026

Terms | Privacy