[njRat] [ALERT] I downloaded njRAT by the link on HF. HACKED. [UPDATED info]

[njRat] [ALERT] I downloaded njRAT by the link on HF. HACKED. [UPDATED info] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: [njRat] [ALERT] I downloaded njRAT by the link on HF. HACKED. [UPDATED info] (/showthread.php?tid=4829126)

Pages: Pages 1 2 3 4 5 6 7 8 9 10 11 12

[njRat] [ALERT] I downloaded njRAT by the link on HF. HACKED. [UPDATED info] - Dafuq - May 20, 2015

As soon as I downloaded it, and ran it, i saw a error, had my AV disabled.

Within few mins my cursor started moving, and pages started refreshing. Definitely hacked. 100% sure!!

Would like to submit the file for testing in case somebody is interested.

I tried posting this on his Thread, but it wont let me post. Had to make a new thread!!

download link for both s/w i was using.

http://ge.tt/6wLWnlG2

Okay, so now i get a link via PM claiming this is the original njRAT - http://up.dev-point.com/downloadf-844b1a166eab1-rar.html

check the md5, size and whatever u people want.

* - Dickleson - May 20, 2015

You should 100% post in here Malware, Rat, and Virus Removal

Ask for a system check-up.

* - Koekert - May 20, 2015

Couldn't it have been something you had recently downloaded before? Since Vuln's thread has 77 pages and I think you're the first to experience problems

* - Dafuq - May 20, 2015

(May 20, 2015 03:11 AM)debeste95 Wrote: Couldn't it have been something you had recently downloaded before? Since Vuln's thread has 77 pages and I think you're the first to experience problems

I just downloaded 2 things

1. VPN client

2. njRat

VPN client is obviously appearing to be clean, but I would get it checked as well, in case its the one.

but Somehow I'm unable to post on xVulnerables thread, thats why i find it fishy!!

(May 20, 2015 03:10 AM)Wallahi Wrote: You should 100% post in here Malware, Rat, and Virus Removal

Ask for a system check-up.

Made a thread there, thank u!

* - Meow - May 20, 2015

[Image: 6f09e2cd3e.png]

lol wtf

* - Dickleson - May 20, 2015

(May 20, 2015 03:17 AM)Meow. Wrote:

lol wtf

That's not indicating that it is dangerous to the downloader though.
That's simply because the file is a RAT. Even the UI and stuff gets classed as malware because of the coding behind it all.

* - Lovesosa - May 20, 2015

(May 20, 2015 03:17 AM)Meow. Wrote:

lol wtf

thaths normal ofc the program is an rat, so it will be decected as an malware.

* - Meow - May 20, 2015

(May 20, 2015 03:19 AM)Mitzz Wrote: thaths normal ofc the program is an rat, so it will be decected as an malware.

"I want to download malware" 🤣🤣

* - Koekert - May 20, 2015

(May 20, 2015 03:15 AM)Dafuq. Wrote: I just downloaded 2 things

1. VPN client

2. njRat

VPN client is obviously appearing to be clean, but I would get it checked as well, in case its the one.

but Somehow I'm unable to post on xVulnerables thread, thats why i find it fishy!!

Made a thread there, thank u!

You mean you can't post on your pc? Because your post did show up, which I guess you posted via your phone.

* - Lovesosa - May 20, 2015

somebody test this shit with an vm , i dont have an vm otherwhise i wud.

* - Dafuq - May 20, 2015

(May 20, 2015 03:24 AM)Mitzz Wrote: somebody test this shit with an vm , i dont have an vm otherwhise i wud.

I would appreciate if someone can test it, coz then we will be sure.

* - gherardus - May 20, 2015

if the file is crypted it could not work on a vm.

* - BahNahNah - May 20, 2015

I ran it sandboxie and nothing abnormal.
There is a possibility that it wont execute the trojan (if it is infected) if it detects a vm/sandboxie.

* - Dafuq - May 20, 2015

(May 20, 2015 03:31 AM)BahNahNah Wrote: I ran it sandboxie and nothing abnormal.
There is a possibility that it wont execute the trojan (if it is infected) if it detects a vm/sandboxie.

I ran it on my System, coz xVulnerables was supposedly "HQ" and "Trusted"

I am indeed shocked.

* - BahNahNah - May 20, 2015

(May 20, 2015 03:32 AM)Dafuq. Wrote: I ran it on my System, coz xVulnerables was supposedly "HQ" and "Trusted"

I am indeed shocked.

Download autoruns and see if there is anything abnormal in your startup (check for things in Appdata/temp)
https://technet.microsoft.com/en-us/sysinternals/bb963902.aspx