Extracted

• • Target

    tmp/ecba483f-91b4-48f5-bdb9-4e928a6107c2_w.exe

  • Size

    23KB

  • MD5

    253c0a7c550a95472eb3e94bdc958597

  • SHA1

    7d0c637530af513dfa2beb7106414717520fd38b

  • SHA256

    fcfa50ca0d4dcf2bb6e96e7b7a223138068f2d6a458d2630757e3bcbe0684aaa

  • SHA512

    c183bda213fb008f8fc431183dbf4b7c1fb70b0bcf423205a3beea0399848ddaa75142692e386d8dfb8e61549b84ed59cb12a39151ae8b49629189f279d389e8

  Score

  10^/10

  njratevasionpersistencetrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Modifies Windows Firewall

    evasion

  • Drops startup file

  • Adds Run key to start application

    persistence
  behavioral1behavioral2