Extracted

Extracted

• • Target

    CF75D51EC31D817017D71DBE8DEF69D443E4ECCA131E7.exe

  • Size

    398KB

  • MD5

    61522f3e0ff5ffcd3b70af0969ce67ff

  • SHA1

    055acee75181881b27e6c489b85efc530ed2a145

  • SHA256

    cf75d51ec31d817017d71dbe8def69d443e4ecca131e70ca6252ebc455e065a2

  • SHA512

    650da92d3c10f8649253016c721a7c522b213342913c134303a843aedee51e10e77a6913a8fe707a26b895d606dd2d362a5eba14de25c5f90a5eee1f8f8defd8

  Score

  10^/10

  njrataaalammerevasionpersistencesuricatatrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

    suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

    suricata

  • Executes dropped EXE

  • Modifies Windows Firewall

    evasion

  • Drops startup file

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2