Overview

overview

10

Static

static

8456be962d...9a.exe

windows7_x64

10

8456be962d...9a.exe

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8456be962d01eac8e2f40d0a310d767cd5ec44b28d359030b1a04ecea974979a

  • Size

    206KB

  • Sample

    220124-d32rsabcfq

  • MD5

    be6e448595e3a98ddd11c3cfb49e51e6

  • SHA1

    3be3d8f313d3f4d0421c0f496cd1f8a39a04ec14

  • SHA256

    8456be962d01eac8e2f40d0a310d767cd5ec44b28d359030b1a04ecea974979a

  • SHA512

    af37c168d0031ea0ee0a25aa6a7698b02d36c232c195cb067a0966bd1b4aa9ac8045dfcf279fc492013231ed5288ea1dce20f89257618d70a77ab2ebb384972e

Score
10/10
njrattrojan

Malware Config

Targets

    • Target

      8456be962d01eac8e2f40d0a310d767cd5ec44b28d359030b1a04ecea974979a

    • Size

      206KB

    • MD5

      be6e448595e3a98ddd11c3cfb49e51e6

    • SHA1

      3be3d8f313d3f4d0421c0f496cd1f8a39a04ec14

    • SHA256

      8456be962d01eac8e2f40d0a310d767cd5ec44b28d359030b1a04ecea974979a

    • SHA512

      af37c168d0031ea0ee0a25aa6a7698b02d36c232c195cb067a0966bd1b4aa9ac8045dfcf279fc492013231ed5288ea1dce20f89257618d70a77ab2ebb384972e

    Score
    10/10
    njrattrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks