Skip to main content

NjRAT

Malware Family

8 258 indicators of compromise attributed to NjRAT across abuse.ch threat intelligence feeds.

Domains

62

IPs

103

URLs

0

Hashes

8 093

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (62)IPs (103)Hashes (8 093)

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

IndicatorType
rjnfjrtc.pwrp.ccdomain
phishing.researchinstitute.iodomain
same53-51830.portmap.hostdomain
mangy10.ddns.netdomain
phishing.achievementschooldistrict.orgdomain
dllhosts.dynu.netdomain
mrkristach-59999.portmap.hostdomain
oa8naf3lih.localto.netdomain
1odhwfyicv.localto.netdomain
reversemalokin.ddns.netdomain
justhacker028.zapto.orgdomain
sundoon.no-ip.infodomain
phishing.solemarbeach.comdomain
basic-incoming.gl.at.ply.ggdomain
maherooff12.no-ip.bizdomain
alkhal015.ddns.netdomain
free-represents.gl.at.ply.ggdomain
trabajo8312.duckdns.orgdomain
fouad-94.myq-see.comdomain
startitit2-23969.portmap.hostdomain
104.250.167.93ip
2.56.165.157ip
82.102.219.33ip
188.212.158.102ip
47.122.120.5ip
3.67.62.142ip
213.111.189.20ip
57.129.2.13ip
144.31.169.191ip
83.142.209.230ip
3.110.2.74ip
13.234.60.207ip
82.22.62.197ip
213.209.150.210ip
154.253.239.21ip
49.233.190.64ip
8.162.10.218ip
172.94.46.114ip
105.79.81.215ip
80.200.202.102ip
3d12a39e3a94131fc5cb7d5ad0a3ae94c94ed9f528a68bcdbc50f1316860e157hash
31efd625da819335f50f5ba78d7916c944a59ae371653e955405b5ca7ab6579ahash
55f84ed4f6871f56d7ffbe282e9253f2ee84c6a9cd6c0b6977126de2cb341d5dhash
e8cb9768f1137a92fd51df077cb724b696602a45b139426cb35f4add8fa56880hash
8c41cc5d45e91f116aa8319fbadfd91657375e95145559e39f76e1f5380ca53bhash
984d63723d3c3556e717c7b885cebcd3f26f2c3b2d9a3113c9a4f03009b1a0aahash
27796be9f32192fe3eed107617472cbb7c148a38385d8cc18f4d195ee21e4647hash
ccd171c1cdc74d6462711d51fad299ebb30bcd433b39581f7315c22d48d90e1fhash
87a62cc18156525f997087f7958522a16815fb481db9a5db7d78ea9dc3ca2633hash
7b8abc634e27ca7b8faa345bc0d168c9e00ab5970b4074f357e1345867ba37c9hash
1efa20b2b604e115f7e8c03b1ff6e51ce6ee40e9a88defaa9e9d84a2d348db98hash
c32167a9f3037d4b986e3480f58e3310874ab95310c161501f7ea5b4095e3534hash
99e3e8a30f946770b612f530e63f0448d4e0dc261d165918b09abd2dd67d08c3hash
18e54208b0c6e7792d5b48f13846dee4f2f653409b9a2133d7c6b0101a7dfc9ahash
f03b45bf3960206214a913c09aae91adc52f1a6171334bb0c0bd8f96f4dea82dhash
51fdd83b3737add7f3832bd0ad0b56863c0a8f7cf9bcc16fd787d1ae4b403ce6hash
46a9fd7c1f057ddb96e35ae32b81273b7ef1c2abd0fd0b41a414cf6e657a77c9hash
ece675462da4a3c65d174e906f233207899a4ec2d1309860e40a8cf2c897193chash
d2a5408154b1551ffa7e25ac75836e9df32edd62c677e6e55541257b99dd60b2hash
6f129f0a99d52eb16b954327d4d2971ed429f35d09d0186d438bc24650a36707hash

Another file to check? Run a file hash reputation check.