Overview

overview

10

Static

static

7265329c7d...74.exe

windows7_x64

10

7265329c7d...74.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7265329c7d297c83cd51f0aeef53fc6936edfad2fdf18389d2f52b23ea2bac74

  • Size

    1.8MB

  • Sample

    220124-dws63abaf2

  • MD5

    ce0f944b84b823e1267175d6b4f5cdbd

  • SHA1

    d20e4bd150dd042620c288f856ac26743239e3fd

  • SHA256

    7265329c7d297c83cd51f0aeef53fc6936edfad2fdf18389d2f52b23ea2bac74

  • SHA512

    9320426b1f43b46675bc4255bc8615aca4f11a5d159991734b37ddecc2f0e8c79fe9f4a958961f4d1dea09177cb8886b3cbf9fd82a637b4467959727a4d306ae

Score
10/10
njrattrojan

Malware Config

Targets

    • Target

      7265329c7d297c83cd51f0aeef53fc6936edfad2fdf18389d2f52b23ea2bac74

    • Size

      1.8MB

    • MD5

      ce0f944b84b823e1267175d6b4f5cdbd

    • SHA1

      d20e4bd150dd042620c288f856ac26743239e3fd

    • SHA256

      7265329c7d297c83cd51f0aeef53fc6936edfad2fdf18389d2f52b23ea2bac74

    • SHA512

      9320426b1f43b46675bc4255bc8615aca4f11a5d159991734b37ddecc2f0e8c79fe9f4a958961f4d1dea09177cb8886b3cbf9fd82a637b4467959727a4d306ae

    Score
    10/10
    njrattrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks