846e326bf44156b57b223a47574ce383a12a36600d58abc92ad4bffed46647ff
Classification: Malicious
846e326bf44156b57b223a47574ce383a12a36600d58abc92ad4bffed46647ff is a malicious file sample. Linked to Njrat malware.
Detection summary
- 0 antivirus detections
- 1 IDS alerts
- 6 processes observed
- 10 contacted hosts
- 1 DNS requests
MITRE ATT&CK associations
Malware families: NJRAT (S0385)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2024-01-24 13:23:06 | 2026-09-02 21:45:07 | malicious-activity | |
| njrat | MalwareBazaar Abuse.ch | 2024-01-22 19:34:01 | 2024-01-22 19:34:01 | malicious-activity | S0385 njRAT |
Tags
bladabindi evasive njratSample information
- Filenames
- 846e326bf44156b57b223a47574ce383a12a36600d58abc92ad4bffed46647ff, 846e326bf44156b57b223a47574ce383a12a36600d58abc92ad4bffed46647ff.exe
- File type
- application/x-dosexec
- Size
- 37888 bytes
- MD5
d0c3e7b04033acd95ef28afbb67f88fe- SHA-1
c5c9d57e77969aca2e42d7b644f776be17be27fd- SHA-256
846e326bf44156b57b223a47574ce383a12a36600d58abc92ad4bffed46647ff- First indexed
- 2024-01-24 12:21:03
- Last updated
- 2026-09-02 21:45:07
Network contacts
3.74.27.83 18.153.198.123 3.71.225.231 18.192.31.30 52.57.120.10 3.78.28.71 18.192.31.165 3.124.142.205 3.125.223.134 3.125.102.39
DNS requests
Process list
| Name | Command line |
|---|---|
| 846e326bf44156b57b223a47574ce383a12a36600d58abc92ad4bffed46647ff.exe | |
| netsh.exe | netsh firewall add allowedprogram "C:\846e326bf44156b57b223a47574ce383a12a36600d58abc92ad4bffed46647ff.exe" "846e326bf44156b57b223a47574ce383a12a36600d58abc92ad4bffed46647ff.exe" ENABLE |
| 846e326bf44156b57b223a47574ce383a12a36600d58abc92ad4bffed46647ff.exe | .. |
| netsh.exe | netsh firewall add allowedprogram "C:\846e326bf44156b57b223a47574ce383a12a36600d58abc92ad4bffed46647ff.exe" "846e326bf44156b57b223a47574ce383a12a36600d58abc92ad4bffed46647ff.exe" ENABLE |
| afe56b93a28a14c8bcebd0992e16ca71.exe | |
| netsh.exe | netsh firewall add allowedprogram "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\afe56b93a28a14c8bcebd0992e16ca71.exe" "afe56b93a28a14c8bcebd0992e16ca71.exe" ENABLE |