Description
Widely used RAT written in .NET.
ab5bfb7c642e59a9c8a6f372ee4847bf5cbc9222ba8a4459997e7cd64cb97145
General
Target
Size
Sample
ab5bfb7c642e59a9c8a6f372ee4847bf5cbc9222ba8a4459997e7cd64cb97145
310KB
210922-qned6afdcm
Score
10 /10
MD5
SHA1
SHA256
SHA512
7d800ad9f415b03e6bb9a029fa57a3ec
73d737b77a8fea41dad18dc6cdde0892b0dc9796
ab5bfb7c642e59a9c8a6f372ee4847bf5cbc9222ba8a4459997e7cd64cb97145
5549ec9bdf48419ad8edaceb1120ad4c8ccc0ead7057a7349ca40ccd997c70244eb1c102a4f63e03acd76947a76a0456dc00473458c18509b803451779c5bf0a
Malware Config
Targets
Target
MD5
Filesize
ab5bfb7c642e59a9c8a6f372ee4847bf5cbc9222ba8a4459997e7cd64cb97145
7d800ad9f415b03e6bb9a029fa57a3ec
310KB
Score
10 /10
SHA1
SHA256
SHA512
73d737b77a8fea41dad18dc6cdde0892b0dc9796
ab5bfb7c642e59a9c8a6f372ee4847bf5cbc9222ba8a4459997e7cd64cb97145
5549ec9bdf48419ad8edaceb1120ad4c8ccc0ead7057a7349ca40ccd997c70244eb1c102a4f63e03acd76947a76a0456dc00473458c18509b803451779c5bf0a
Tags
Signatures
-
njRAT/Bladabindi
-
Executes dropped EXE
-
Modifies Windows Firewall
Tags
TTPs
-
Drops startup file
-
Loads dropped DLL
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks