Overview

overview

10

Static

static

c88b3b1eb6...6a.exe

windows7_x64

10

c88b3b1eb6...6a.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c88b3b1eb6d7d4b7b386ac6fead82c5b1ffb6e8ec7f40fd4961721b58a19ea6a

  • Size

    3.5MB

  • Sample

    220124-dmqpksahb5

  • MD5

    de7cfef57b848a8d7f0a1d4828d6f1ed

  • SHA1

    baf8597d52222329b24ed7ae72262ad5f383e61b

  • SHA256

    c88b3b1eb6d7d4b7b386ac6fead82c5b1ffb6e8ec7f40fd4961721b58a19ea6a

  • SHA512

    6d4f761ac1f7c4a9e7384bd866333e1845ba3998f34e294fea8934e3e7106f82ec5bd9f7798c56c2cb22422242adbadeecd92c9f51cac478ee608e6b3c1b96cf

Score
10/10
njrattrojan

Malware Config

Targets

    • Target

      c88b3b1eb6d7d4b7b386ac6fead82c5b1ffb6e8ec7f40fd4961721b58a19ea6a

    • Size

      3.5MB

    • MD5

      de7cfef57b848a8d7f0a1d4828d6f1ed

    • SHA1

      baf8597d52222329b24ed7ae72262ad5f383e61b

    • SHA256

      c88b3b1eb6d7d4b7b386ac6fead82c5b1ffb6e8ec7f40fd4961721b58a19ea6a

    • SHA512

      6d4f761ac1f7c4a9e7384bd866333e1845ba3998f34e294fea8934e3e7106f82ec5bd9f7798c56c2cb22422242adbadeecd92c9f51cac478ee608e6b3c1b96cf

    Score
    10/10
    njrattrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks