Extracted

• • Target

    57933F53BC7915A61CFED96F47ACDCB579117E9A3B746.exe

  • Size

    160KB

  • MD5

    70a2972e4036a8286119eff6e075e774

  • SHA1

    cdc711bcd37e5eadbaf716fac8a47e60a83edcf6

  • SHA256

    57933f53bc7915a61cfed96f47acdcb579117e9a3b7469812de2b8184e144f7c

  • SHA512

    fa621174207d995c57b2c3ffd56b152d2a57f60d4ecf141e11ce6d2b95daa1656e62b517b16cbd26d76475c17e00a92b468a78db4eda859a18ad32dc2a5200d6

  Score

  10^/10

  njrathackedevasionpersistencetrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Executes dropped EXE

  • Modifies Windows Firewall

    evasion

  • Drops startup file

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Drops autorun.inf file

    Malware can abuse Windows Autorun to spread further via attached volumes.

  behavioral1behavioral2