Extracted

• • Target

    5881ED83EF800AC9CBC9E74C6A9E403521AFED344105E.exe

  • Size

    23KB

  • MD5

    40d8409cbbafe7fc7ee3132f00ad9423

  • SHA1

    849c0f16a80cc4c1acd1dfa875de31e028e2ecfc

  • SHA256

    5881ed83ef800ac9cbc9e74c6a9e403521afed344105ee157d66916e70ff63df

  • SHA512

    90d66e223935efa2ccba3b2bb5b2533bd0f33ea6def1057ff210bfca1f0235698a60949825b8e695d3d5e532aa672a72058e35389761534955c8e55246606684

  Score

  10^/10

  njratmscodeevasionpersistencetrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Executes dropped EXE

  • Modifies Windows Firewall

    evasion

  • Adds Run key to start application

    persistence
  behavioral1behavioral2