Malware Signature

The following table shows a list of malware samples and the corresponding botnet C&C (ip:port) associated with njrat

Database Entry


Malware:njrat
First seen:2018-11-02 01:43:41 UTC
Last seen:2021-08-12 12:22:46 UTC

Malware Samples


The table below documents all malware samples associated with this malware family.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2021-08-12 12:22:466672396fbc8d95998e078ddbc3b67085n/anjrat103.140.250.132:9178
2021-08-12 12:22:456672396fbc8d95998e078ddbc3b67085n/anjrat103.147.184.73:7920
2021-08-11 05:44:12056df398d65086f73dad7bcf3d2e5374n/anjrat20.194.35.6:7904
2021-08-11 05:44:12056df398d65086f73dad7bcf3d2e5374n/anjrat20.194.35.6:7904
2021-07-29 15:29:18970d2089e6430c48a4e8a2ed2a7300cfVirustotal results 20 / 69 (28.99%) njrat201.219.204.73:1884
2021-07-29 15:29:18970d2089e6430c48a4e8a2ed2a7300cfVirustotal results 20 / 69 (28.99%) njrat201.219.204.73:1884
2021-07-09 05:18:245a67844d3cc52e838d348cfd62b30875n/anjrat77.247.127.177:6666
2021-07-09 05:18:245a67844d3cc52e838d348cfd62b30875n/anjrat77.247.127.177:6666
2021-06-08 10:15:53af77940833fa2c05c02dca05451ff22cVirustotal results 31 / 68 (45.59%) njrat89.182.63.182:3601
2021-06-08 10:15:53af77940833fa2c05c02dca05451ff22cVirustotal results 31 / 68 (45.59%) njrat89.182.63.182:3601
2021-02-11 20:23:115a16ec6df839b4d1a470a873b3da9d09Virustotal results 38 / 71 (53.52%) njrat54.89.120.178:1605
2021-02-11 20:23:115a16ec6df839b4d1a470a873b3da9d09Virustotal results 38 / 71 (53.52%) njrat54.89.120.178:1605
2021-01-17 18:40:244d5557e06c5f50770d5a94aa8bb8f6c5Virustotal results 36 / 62 (58.06%) njrat20.50.121.62:1604
2021-01-17 18:40:244d5557e06c5f50770d5a94aa8bb8f6c5Virustotal results 36 / 62 (58.06%) njrat20.50.121.62:1604
2021-01-13 00:28:44a670c2ca8742cbb0d5f3da605362ef61Virustotal results 37 / 70 (52.86%) njrat185.128.25.29:8808
2021-01-13 00:28:44a670c2ca8742cbb0d5f3da605362ef61Virustotal results 37 / 70 (52.86%) njrat185.128.25.29:8808
2021-01-03 23:33:00912a54138b1dd6f99cf3fbf10d417487Virustotal results 23 / 69 (33.33%) njrat185.128.25.29:8808
2021-01-03 23:33:00912a54138b1dd6f99cf3fbf10d417487Virustotal results 23 / 69 (33.33%) njrat185.128.25.29:8808
2021-01-01 19:58:20316f880c7d565cd01f39bd6d90e5168fVirustotal results 43 / 71 (60.56%) njrat185.128.25.29:6606
2021-01-01 19:58:20316f880c7d565cd01f39bd6d90e5168fVirustotal results 43 / 71 (60.56%) njrat185.128.25.29:6606
2020-12-17 15:37:15aab32ac86387600866203fd19780ebe3Virustotal results 43 / 70 (61.43%) njrat185.128.25.29:6606
2020-12-17 15:37:15aab32ac86387600866203fd19780ebe3Virustotal results 43 / 70 (61.43%) njrat185.128.25.29:6606
2020-12-06 14:02:36fe21c74da827cee7a6fe0ff8d8eeb526n/anjrat185.128.25.29:8808
2020-12-06 14:02:36fe21c74da827cee7a6fe0ff8d8eeb526n/anjrat185.128.25.29:8808
2020-11-18 23:25:258acaf101b62788c4a96f733d792af5b7Virustotal results 45 / 71 (63.38%) njrat185.128.25.29:7707
2020-11-18 23:25:258acaf101b62788c4a96f733d792af5b7Virustotal results 45 / 71 (63.38%) njrat185.128.25.29:7707
2020-11-15 19:50:1233c1262ddc0d94deea4c0b944eba3d13Virustotal results 29 / 72 (40.28%) njrat185.128.25.29:6606
2020-11-15 19:50:1233c1262ddc0d94deea4c0b944eba3d13Virustotal results 29 / 72 (40.28%) njrat185.128.25.29:6606
2020-10-18 06:51:363139e569b809a7397f4a359479d4ff57Virustotal results 52 / 71 (73.24%) njrat192.253.244.137:6606
2020-10-18 06:51:363139e569b809a7397f4a359479d4ff57Virustotal results 52 / 71 (73.24%) njrat192.253.244.137:6606
2020-10-17 22:53:18892089b35a9a990a812d6c1cccbdcdcbn/anjrat192.253.244.137:6606
2020-10-17 22:53:18892089b35a9a990a812d6c1cccbdcdcbn/anjrat192.253.244.137:6606
2020-10-12 15:44:00357f960242f342728772ec09938fe05fn/anjrat192.253.244.137:7707
2020-10-12 15:44:00357f960242f342728772ec09938fe05fn/anjrat192.253.244.137:7707
2020-02-07 14:01:13d7400a37f97f944e4eeb22fa332f4d97n/anjrat82.64.128.42:6613
2020-02-07 14:01:13d7400a37f97f944e4eeb22fa332f4d97n/anjrat82.64.128.42:6613
2019-12-01 02:57:535b0cad0b2517ca291fd28b0990fdf9c9Virustotal results 25 / 69 (36.23%) njrat54.255.139.136:80
2019-12-01 02:57:535b0cad0b2517ca291fd28b0990fdf9c9Virustotal results 25 / 69 (36.23%) njrat54.255.139.136:80
2019-07-04 14:14:06b87d782cc4086eb88550b4705e74dba6Virustotal results 49/68 (72.06%) njrat179.180.17.194:9830
2019-07-04 14:14:06b87d782cc4086eb88550b4705e74dba6Virustotal results 49/68 (72.06%) njrat179.180.17.194:9830
2019-07-04 06:00:29cf7139c8298d2eb579e0ee1d593621b8Virustotal results 23/59 (38.98%) njrat179.180.17.194:9830
2019-07-04 06:00:29cf7139c8298d2eb579e0ee1d593621b8Virustotal results 23/59 (38.98%) njrat179.180.17.194:9830
2019-05-29 05:59:200008996b982d0d86e1a89932e466bdfeVirustotal results 33/70 (47.14%) njrat109.236.80.32:8808
2019-05-29 05:59:200008996b982d0d86e1a89932e466bdfeVirustotal results 33/70 (47.14%) njrat109.236.80.32:8808
2018-11-02 01:43:41f8d23dd14ad06168d45d3d23aed631f0Virustotal results 16/67 (23.88%) njrat145.239.140.188:60
2018-11-02 01:43:41f8d23dd14ad06168d45d3d23aed631f0Virustotal results 16/67 (23.88%) njrat145.239.140.188:60