Extracted

• • Target

    8b191797f59eed06a02682638aef669c467eb1b0a205f4e525bd1ec0b1d13ddd

  • Size

    155KB

  • MD5

    b5b82647f5478d76c7a6d03f56a4a5d4

  • SHA1

    adc613169ac58740eb92aa9e8bbd163f4c0079c0

  • SHA256

    8b191797f59eed06a02682638aef669c467eb1b0a205f4e525bd1ec0b1d13ddd

  • SHA512

    9cc88fe37bb0d21002b18916358c1d24ad1f10dabbbf952193536680aac1df3fc96dfab40d28a59c74c5186724fbda2c4227c090710d2ee2aafb6aebefb1b7d1

  Score

  10^/10

  njrathackedevasionpersistencetrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Executes dropped EXE

  • Modifies Windows Firewall

    evasion

  • Drops startup file

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2