njRAT-v0.8.0-LIME-EDITION

njRAT has been around since at least 2013 and is one of the most prevalent malware families. Built in .NET Framework, the malware provides attackers with remote control over the infected systems, utilizes dynamic DNS for command-and-control (C&C), and uses a custom TCP protocol over a configurable port for communication.

Dubbed njRAT Lime Edition, the new malware variant includes support for ransomware infection, Bitcoin grabber, and distributed denial of service (DDoS), while also being able to log keystrokes, spread via USB drives, steal passwords, and lock the screen.

Current Features

1. Socket Key Changer

2. Malware Killer

3. USB Spread

4. Anti Vmware Sandboxie .. etc

5. Show Anti-Virus Software

6. Startup using *.URL

7. Reconnect Timeout

8. Sleep

9. Persistence

10. Bypass UAC

11. Hide

12. Torrent Seeder

13. Message Box

14. Visit webpage visible or hidden

15. Task Manager Disable or Enable

16. CMD enable or disable [Admin]

17. Chrome cookies remover

18. Mouse reverse or normal

19. Clipboard copy or clear

20. Taskbar show or hide

21. Monitor OFF or ON

22. Text To Speech

23. Delete EventsViewer [Admin]

24. Downloader

25. Updated GeoIP.dat

26. Updated Passwords Recovery

27. NO-IP Updater

28. Assembly And Icon Changer

29. Flooder

30. Obfuscation

31. MPress

32. Plugin Compiler

33. Visible Client

34. Clean My PC

35. Shutdown Restart PC

Q: Why file uploaded on other website?

A: Because of the limitation of uploading file size on github.

Q: Why the file have password?

A: to reduce false positive detection from upload host. (virustotal link include the scanned file without the password)