Malware analysis

malpedia.caad.fkie.fraunhofer.de/details/win.njrat

https://malpedia.caad.fkie.fraunhofer.de/details/win.njrat
Published on
malpedia.caad.fkie.fraunhofer.de

ATT&CK techniques those detections carry

  • T1027.011Fileless Storage
  • T1069.001Local Groups
  • T1102Web Service
  • T1112Modify Registry
  • T1129Shared Modules
  • T1497.003Time Based Checks
  • T1685Disable or Modify Tools
  • T1686Disable or Modify System Firewall
Open the original

8 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
DetectionSeverity
Windows Time Based EvasionMedium
Windows Abused Web ServicesInformational
Windows Njrat Fileless Storage via RegistryMedium
Windows Modify Registry With MD5 Reg Key NameMedium
Windows Executable in Loaded ModulesMedium
Windows Disable or Modify Tools Via TaskkillInformational
Windows Delete or Modify System FirewallMedium
Windows Admin Permission DiscoveryInformational

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice