>samit_hota
Back to IOCs
G00218 indicators

NjRAT — Indicators of Compromise

Samit Hota·
#ioc#njrat

Overview

Indicators of compromise associated with NjRAT. 8 indicators listed below, linked to the G0021 adversary profile.

Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.

TypeIndicatorFirst SeenConfidence
sha256_hashe16ea5b5892442616eb4b0d8e53a242e6532b77db42202d33b78ef9461745cc5July 20, 202695%
sha1_hash74983470e89aea81c6f0de3a50616b5ddd1988feJuly 20, 202695%
md5_hashb3f9d748284ba06c5f74c062b11c6066July 20, 202695%
ip:port47.122.120.5:14299July 17, 2026100%
sha256_hash4e5c8cedafeb1be4d6d1719cc913d5e13666c8b67e23e0c29f94baff0c00ce45July 14, 202695%
sha1_hashe8c9bae6dcae34bfb51c0073d89b7f2d944f68c6July 14, 202695%
md5_hash2f577ce224d2311a841d8d76abb63b70July 14, 202695%
ip:port178.80.40.237:1177July 13, 2026100%

Seeing these indicators in your logs?

Let's figure out how far it's gotten.

Book an advisory call