Extracted

• • Target

    93abd5fd5684804d71380d38d29229c4.exe

  • Size

    93KB

  • MD5

    93abd5fd5684804d71380d38d29229c4

  • SHA1

    37fc6c58c910d7ed3ad47d25698f52f5a8f7aeb9

  • SHA256

    13f740ded52b5779a1087e1d7a333b622ad3ed80a962e4211e76adf42cc0765b

  • SHA512

    036f32739370925d2362aa28aaf543b90e2facb7859b2ca0c46c59bcc749ec74f6823c70a20b50fd580a9ec77846c58a946ae933e404fc603b689d30bf095b0a

  Score

  10^/10

  njrathackedevasionsuricatatrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

    suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

    suricata

  • Disables Task Manager via registry modification

    evasion

  • Executes dropped EXE

  • Modifies Windows Firewall

    evasion

  • Deletes itself

  • Drops startup file

  • Loads dropped DLL

  • Drops autorun.inf file

    Malware can abuse Windows Autorun to spread further via attached volumes.

  behavioral1behavioral2