Decoding njRAT traffic with NetworkMiner

Author(s): Erik Hjelmvik
Organization: Netresec

Open article directly Open article on Archive.org

2026-02-02 ⋅ Netresec ⋅ Erik Hjelmvik
njRAT runs MassLogger
MASS Logger NjRAT

2025-12-10 ⋅ Netresec ⋅ Erik Hjelmvik
Latrodectus BackConnect
IcedID Keyhole Latrodectus

2025-09-24 ⋅ Netresec ⋅ Erik Hjelmvik
Gh0stKCP Protocol
PseudoManuscrypt ValleyRAT

URL

Title

Authors

Language

Date Please use YYYY-MM-DD, YYYY-MM, or YYYY.

Organization (optional)

Referenced families (optional)

Comment Add additional information to explain your proposal.

Your suggestion will be reviewed before being published.
Thank you for contributing!

Propose Change Decoding njRAT traffic with NetworkMiner