Extracted

• • Target

    a73c12e9bb944ca7494ac845ee87db2e.exe

  • Size

    92KB

  • MD5

    a73c12e9bb944ca7494ac845ee87db2e

  • SHA1

    20ea37ae6b6b6cf15edc65bf200cde2a2b47d2a2

  • SHA256

    0e24d40828ef4582c2571e175e9f1c59e1484fa926cffe18b1a4547f6ee2781a

  • SHA512

    c89e78e08f97f6399d92a71efb489d998b2089bae74f26555f569e21440561fea64956370d8b881e3c8729f20ddc466c6821f5529cbc3a205b0700ba93f47bd5

  Score

  10^/10

  njrathackedevasionpersistencesuricatatrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

    suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

    suricata

  • Executes dropped EXE

  • Modifies Windows Firewall

    evasion

  • Drops startup file

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2