Analysis

  • max time kernel
    106s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20220718-en
  • resource tags

    arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system
  • submitted
    23-07-2022 03:08

General

  • Target

    bDC9.exe

  • Size

    36KB

  • MD5

    93b5e69ea68c3abfe71fa119180f2c74

  • SHA1

    15e3b750243586c10df73f6bac38f5cb1044e008

  • SHA256

    668aaf533c64c79626595e74fbd9c1169178b286bb0dfbfbab24ef5ac48f8647

  • SHA512

    d84467bfee9fe39feeaba514b7e6d42ac35cf5bc8129ca78b4a328da38f1b98109e58bef963cba3fb782ca4389c80b07bd341b3ad2681b333df7cfe0bab12870

Score
10/10

Malware Config

Signatures

  • suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

    suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bDC9.exe
    "C:\Users\Admin\AppData\Local\Temp\bDC9.exe"
    1⤵
      PID:2008

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2008-55-0x000007FEEECC0000-0x000007FEEFD56000-memory.dmp

      Filesize

      16.6MB