Spoof Call and Spoof SMS set any caller ◆ Private Crypter - Unique Private Stubs ◆ [#1] PURE RAT v4 // BEST HVNC RAT ◆ 🏆 Earn HF Awards through Goals ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Blackhat • Red Team • Offensive Security Remote Administration Tools › [njRat] [ALERT] I downloaded njRAT by the link on HF. HACKED. [UPDATED info]

Thread Closed 

[njRat] [ALERT] I downloaded njRAT by the link on HF. HACKED. [UPDATED info]
Dafuq
Dafuq Offline
Certified Shit poster
***
HF Ub3r
Posts:
1,869
Threads:
88
Credibility:
1300
Popularity:
498
βytes:
β 38
Game XP:
237
May 20, 2015 12:00 PM
(May 20, 2015 11:44 AM)xVulnerable Wrote:  My links are not infected.....If you are infected it is probably because you already were. Do a system restore or format your PC if you're paranoid. You didn't show proof.

I cant show proof, what kinda proof am I expected to show? Firstly, I am not Accusing u of ratting me, I am saying that I got a Virus through ur link, coz that was the most recent, and it happened like 5 mins after i ran njRat.

Secondly I have mentioned the other file I was using as well, so that people can check it as well, if that was the one responsible for such an incident. But as of now, nobody has said anything about the VPN software that i used.

@xVulnerable: This thread is not to defame u, or hurt ur sentiments, its here just to get an answer as to what happened and why. Dont take it personally!
Bitdefender
Bitdefender Away
[bin@HF:]
***
HF l33t
Posts:
977
Threads:
14
Credibility:
000
Popularity:
6
βytes:
β 0
Game XP:
0
May 20, 2015 12:03 PM
(May 20, 2015 12:00 PM)Dafuq Wrote:  I cant show proof, what kinda proof am I expected to show? Firstly, I am not Accusing u of ratting me, I am saying that I got a Virus through ur link, coz that was the most recent, and it happened like 5 mins after i ran njRat.

Secondly I have mentioned the other file I was using as well, so that people can check it as well, if that was the one responsible for such an incident. But as of now, nobody has said anything about the VPN software that i used.

@xVulnerable: This thread is not to defame u, or hurt ur sentiments, its here just to get an answer as to what happened and why. Dont take it personally!

He wants proof. If you ask me, that sounds kind of fucked up and there is something sketchy behind it I think...
Geo Trouvetou
Geo Trouvetou Offline
[n00b@HF:]
*
Registered
Posts:
88
Threads:
7
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 20, 2015 12:06 PM
Think is not good, wait for an analyse.
Business
Business Offline
#1 BTC Seller
****
HF Ub3r
Posts:
9,532
Threads:
266
Credibility:
46200
Popularity:
678
βytes:
β -640
Game XP:
1,018
May 20, 2015 12:08 PM
Probably something else you ran. If you get proof, post it!
[Image: uw2cCW1.gif]
Dafuq
Dafuq Offline
Certified Shit poster
***
HF Ub3r
Posts:
1,869
Threads:
88
Credibility:
1300
Popularity:
498
βytes:
β 38
Game XP:
237
May 20, 2015 12:12 PM
(May 20, 2015 12:08 PM)Business Wrote:  Probably something else you ran. If you get proof, post it!

What kinda proof are we talking about? Many users have posted some IP that this njRAT connects to as soon as it is installed. They have also posted stuff related to this RAT dropping files in APPdata. I am not a pro, I am just a guy, who wanted to see how njRAT worked. I have used DarkComet before, never faced such issues. And I dont blame people uselessly.
supreme00.
Guest
 
May 20, 2015 12:13 PM
(May 20, 2015 12:12 PM)Dafuq Wrote:  What kinda proof are we talking about? Many users have posted some IP that this njRAT connects to as soon as it is installed. They have also posted stuff related to this RAT dropping files in APPdata. I am not a pro, I am just a guy, who wanted to see how njRAT worked. I have used DarkComet before, never faced such issues. And I dont blame people uselessly.

they are probs lying there is no way njrat is backdoored it doesn't drop anything nor it connects to an ip
mrfong
mrfong Offline
[closed@HF:]
Posts:
566
Threads:
67
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
May 20, 2015 12:15 PM
that vpn is clean, now, if you only downloades these 2 , it might be the new windows you installed installs something else? i don't know alot about this, but njrat is infected, i tested 3 diffrent ones, and they drop some shit on temp now, it didnt happen with me before and i didn't renew my links, i installed this a month ago and today faced the issue , now about that guy who posted a vpn ip, can someone continue what he did it and get something else than a vpn ip?
Dafuq
Dafuq Offline
Certified Shit poster
***
HF Ub3r
Posts:
1,869
Threads:
88
Credibility:
1300
Popularity:
498
βytes:
β 38
Game XP:
237
May 20, 2015 12:16 PM
This is the reply I am referring to.

(May 20, 2015 10:38 AM)Geo Trouvetou Wrote:  MD5 Checksum are same from the original link given by xVuln's post and one you sent.
- 473e1a7be89c3a727176d4f9f5a64b69

njRAT install itself at startup and drop configs and *.exe files in your Temp folder at start, while running it connects to the IP: ip-176-98-110-78.static.mo-nex.cz:49261(VPN)

Spoiler (Click to View)

I found nothing more, hope than someone can make a reverse engineering and say to us if it's backdoor or not.
mrfong
mrfong Offline
[closed@HF:]
Posts:
566
Threads:
67
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
May 20, 2015 12:16 PM
(May 20, 2015 12:13 PM)supreme00. Wrote:  they are probs lying there is no way njrat is backdoored it doesn't drop anything nor it connects to an ip

They aren't, and i'm not lying too, my passwords were hacked today,and the only thing i opend was njrat, i analyazed it and it says it drops files and it runs on startup?
Dafuq
Dafuq Offline
Certified Shit poster
***
HF Ub3r
Posts:
1,869
Threads:
88
Credibility:
1300
Popularity:
498
βytes:
β 38
Game XP:
237
May 20, 2015 12:19 PM
(May 20, 2015 12:15 PM)mrfong Wrote:  that vpn is clean, now, if you only downloades these 2 , it might be the new windows you installed installs something else? i don't know alot about this, but njrat is infected, i tested 3 diffrent ones, and they drop some shit on temp now, it didnt happen with me before and i didn't renew my links, i installed this a month ago and today faced the issue , now about that guy who posted a vpn ip, can someone continue what he did it and get something else than a vpn ip?

My OS is 100% original. I did not download a Pirated Version. Hence Backdoor or Virus in my OS by default is Impossible.

I didnt use anything else apart from these two programs that could compromise my Laptop's Security. The other Programs I installed include -

1. Chrome
2. Skype
3. McAfee
4. MBAM
5. Virtual Router [to create Hotspot from my laptop]

That's All.
mrfong
mrfong Offline
[closed@HF:]
Posts:
566
Threads:
67
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
May 20, 2015 12:21 PM
@op, i sent you a pm , check it out :P
Dafuq
Dafuq Offline
Certified Shit poster
***
HF Ub3r
Posts:
1,869
Threads:
88
Credibility:
1300
Popularity:
498
βytes:
β 38
Game XP:
237
May 20, 2015 12:23 PM
(May 20, 2015 12:21 PM)mrfong Wrote:  @op, i sent you a pm , check it out :P

Responded, the dlls belong to njRAT. You can test it urself.
mrfong
mrfong Offline
[closed@HF:]
Posts:
566
Threads:
67
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
May 20, 2015 12:24 PM
(May 20, 2015 12:23 PM)Dafuq Wrote:  Responded, the dlls belong to njRAT. You can test it urself.
Confirmed, checked them out.. all of them belong to njrat :(
Dafuq
Dafuq Offline
Certified Shit poster
***
HF Ub3r
Posts:
1,869
Threads:
88
Credibility:
1300
Popularity:
498
βytes:
β 38
Game XP:
237
May 20, 2015 12:25 PM
(May 20, 2015 12:24 PM)mrfong Wrote:  Confirmed, checked them out.. all of them belong to njrat :(

And all of them detected as Trojan/Virus. Isnt it?

Just a noob question, is it normal for Plugins to be detected as Virus? All DLL files belonging to njRAT are detected as Malware and Trojan.
21st Century Schizoid Man
21st Century Schizoid Man Offline
meme
***
HF Ub3r
Posts:
2,884
Threads:
193
Credibility:
000
Popularity:
12
βytes:
β 0
Game XP:
0
May 20, 2015 12:31 PM
The only problem is that,if is him, he probaly updates his website often
[Image: CVwNfyd.jpg]
Next Oldest | Next Newest
Thread Closed 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by CnPxJun 23, 2025 06:44 AM 37 5,139 Jun 23, 2025 06:44 AM
Last Post: anonymousdsa
by Newton3rdLawMar 31, 2022 12:53 PM 6 454 Mar 31, 2022 12:53 PM
Last Post: 1origin23
by HOLLOWZOct 14, 2021 10:26 AM 20 3,996 Oct 14, 2021 10:26 AM
Last Post: Keurig