njrat | 676dd2e21de63fa50431c7d89ec28d409bd11d95ff507af70ff0f8a2eda879ae | Triage™

Login
Reports

Overview

overview

Static

static

Plataforma...in.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
Plataforma virtual eude.exe.bin.exe
Size 93KB
Sample250724-29v5ksfk9t
SHA256 676dd2e21de63fa50431c7d89ec28d409bd11d95ff507af70ff0f8a2eda879ae
MD5 fbd09863b30e4940c73fce7eb03b74df
SHA1 c5260655087f59d3c93624914bb82292db4dafdc
SHA512 ccc79dd170495b4e70544e79fc53262ddc2ef83d58d001394463d42bbd3fab18e5001da29a4a252b014655f2f1e90a200ec8310ed9292dbaad91a3e339d3851c
SSDEEP 768:jY3/CVD9O/pBcxYsbae6GIXb9pDX2b98PL0OXLeuXxrjEtCdnl2pi1Rz4Rk3jsGk:aCfOx6baIa9RPj00ljEwzGi1dDPDGgS
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

njrat mami defense_evasion discovery execution persistence privilege_escalation trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Plataforma virtual eude.exe.bin.exe

Resource

win10v2004-20250610-en

windows10-2004-x64

11 signatures

150 seconds

njrat mami defense_evasion discovery execution persistence privilege_escalation trojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MaMi

C2

hakim32.ddns.net:2000
127.0.0.1:5552

Mutex

ecb00924059abf7d1e147ea1b09b1be3

Attributes

reg_key
ecb00924059abf7d1e147ea1b09b1be3
splitter
|'|'|

Targets

- Target
  Plataforma virtual eude.exe.bin.exe
- Size 93KB
- SHA256 676dd2e21de63fa50431c7d89ec28d409bd11d95ff507af70ff0f8a2eda879ae
- MD5 fbd09863b30e4940c73fce7eb03b74df
- SHA1 c5260655087f59d3c93624914bb82292db4dafdc
- SHA512 ccc79dd170495b4e70544e79fc53262ddc2ef83d58d001394463d42bbd3fab18e5001da29a4a252b014655f2f1e90a200ec8310ed9292dbaad91a3e339d3851c
- SSDEEP 768:jY3/CVD9O/pBcxYsbae6GIXb9pDX2b98PL0OXLeuXxrjEtCdnl2pi1Rz4Rk3jsGk:aCfOx6baIa9RPj00ljEwzGi1dDPDGgS
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

njrat mami defense_evasion discovery execution persistence privilege_escalation trojan
- Njrat family
  njrat
- njRAT/Bladabindi
  Widely used RAT written in .NET.
  trojan njrat
- Modifies Windows Firewall
  defense_evasion
- Executes dropped EXE
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Scheduled Task/Job

Scheduled Task

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

njratmamidefense_evasiondiscoveryexecutionpersistenceprivilege_escalationtrojan

© 2018-2026

Terms | Privacy