Malware Analysis — njRAT

Malware Analysis — njRAT

njRAT is a remote access Trojan (RAT) that allows attackers to gain unauthorized access to a victim’s computer. It is capable of keylogging, taking screenshots, and controlling the victim’s webcam and microphone. It can also download and execute additional malicious payloads.

Figure 1: Malware Bazaar Entry

After downloading and extracting the zip file, I used OLEtools because I knew I was going to deal with an Office file — specifically, a PowerPoint file.

Figure 2: shows …

access analysis attackers bazaar can computer download file keylogging malicious malicious payloads malware malware analysis microphone njrat payloads rat remote access remote access trojan screenshots trojan unauthorized unauthorized access victim webcam zip