Overview

overview

10

Static

static

97b280b69f...9b.exe

windows7_x64

10

97b280b69f...9b.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    97b280b69f91f49d28711137942b3d9b.exe

  • Size

    157KB

  • Sample

    211220-kqfr4saher

  • MD5

    97b280b69f91f49d28711137942b3d9b

  • SHA1

    69f8fd656c22b84eeaac5960e9ef273800c67f0e

  • SHA256

    305be5c89a59aea6f58ccb50ce51fb7a2e74ece50c49a268afec5eef4de73e0e

  • SHA512

    cf04d137d9b6a64b370f32de9c47706682e8eba06fb3c2c665ef6a32ebfd2ba5f4f014dd7dcafb04ac4cbc2c9bf97fb8316f5430e5250a3b8063c74842d92a65

Score
10/10
njratevasionpersistencetrojan

Malware Config

Targets

    • Target

      97b280b69f91f49d28711137942b3d9b.exe

    • Size

      157KB

    • MD5

      97b280b69f91f49d28711137942b3d9b

    • SHA1

      69f8fd656c22b84eeaac5960e9ef273800c67f0e

    • SHA256

      305be5c89a59aea6f58ccb50ce51fb7a2e74ece50c49a268afec5eef4de73e0e

    • SHA512

      cf04d137d9b6a64b370f32de9c47706682e8eba06fb3c2c665ef6a32ebfd2ba5f4f014dd7dcafb04ac4cbc2c9bf97fb8316f5430e5250a3b8063c74842d92a65

    Score
    10/10
    njratevasionpersistencetrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Modifies Windows Firewall

      evasion

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks