Overview

overview

10

Static

static

3f779d9227...04.exe

windows7_x64

1

3f779d9227...04.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    184s
  • max time network
    193s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    01-07-2022 01:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3f779d9227a4c4207d156c136d9c7a3d8b2e92fce22c379bff4128f3d922a004.exe

  • Size

    88KB

  • MD5

    6ef12f96e1a99984a96d6e1657389566

  • SHA1

    d8c04d05cbc86dcd6b0d485827e4505c2dc079e9

  • SHA256

    3f779d9227a4c4207d156c136d9c7a3d8b2e92fce22c379bff4128f3d922a004

  • SHA512

    9205b9100fad3d232fb4078b433e826882584dcb0d3abadbbaf7c5e0aee686af9b9d516c9534b59362ddfbcd3ec944b9acd3319858dd7a662ec3e645817217c4

Score
10/10
njrattrojan

Malware Config

Signatures

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat
  • Suspicious use of AdjustPrivilegeToken 33 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3f779d9227a4c4207d156c136d9c7a3d8b2e92fce22c379bff4128f3d922a004.exe
    "C:\Users\Admin\AppData\Local\Temp\3f779d9227a4c4207d156c136d9c7a3d8b2e92fce22c379bff4128f3d922a004.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3580

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3580-130-0x00007FFEFB8D0000-0x00007FFEFC306000-memory.dmp
    Filesize

    10.2MB

    Download