Extracted

• • Target

    753C707E47BCE65D32BE781EA1584E0B.exe

  • Size

    84KB

  • MD5

    753c707e47bce65d32be781ea1584e0b

  • SHA1

    7b43f6a910b01553dfae51560570365e3ce9ed42

  • SHA256

    b1c0e35f47273a236518f43ee56c0367d8b423ca9ed8f9e7ad4a875caa47bb69

  • SHA512

    8afc2ebbc80e17e42317202e9479e0c223456cf9f0b22ccdf9fe486eff19ebf9a33a2e00c01aa81168d4ad9950c34c8d78dc2f5821702fe61874221088d3cdda

  Score

  10^/10

  njratnyan catpersistencesuricatatrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

    suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

    suricata

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2