Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

B56D5976D9...C1.exe

windows7-x64

8

B56D5976D9...C1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    B56D5976D93635974B4BD302578E147064523A1E07AC1.exe

  • Size

    313KB

  • Sample

    220917-vjjkjaaaf7

  • MD5

    1bf50ad7ee44ebd5d6a12033882ce72c

  • SHA1

    40c0674283595b03200bd2d7b46aff240c94193e

  • SHA256

    b56d5976d93635974b4bd302578e147064523a1e07ac11c55ba078a16a571fd7

  • SHA512

    c14ff25c5b6be262fa2a880051e784945eb7f35523a837ed9ce0bffa4f4652474cb6a28dffd81d8327ae742f7f913d53a82edaf02688893e58fc55057039aa26

  • SSDEEP

    3072:7OKkzoKqcD9MBkqtk26R3nQ5u8gXOR4F5/tcoJlPtaWHubKtbCrxdtSQbexk7pi:7KzBqIUb6cgw46Ot0ytbCQQbexkI

Score
10/10
njratevasionpersistencetrojan

Malware Config

Targets

    • Target

      B56D5976D93635974B4BD302578E147064523A1E07AC1.exe

    • Size

      313KB

    • MD5

      1bf50ad7ee44ebd5d6a12033882ce72c

    • SHA1

      40c0674283595b03200bd2d7b46aff240c94193e

    • SHA256

      b56d5976d93635974b4bd302578e147064523a1e07ac11c55ba078a16a571fd7

    • SHA512

      c14ff25c5b6be262fa2a880051e784945eb7f35523a837ed9ce0bffa4f4652474cb6a28dffd81d8327ae742f7f913d53a82edaf02688893e58fc55057039aa26

    • SSDEEP

      3072:7OKkzoKqcD9MBkqtk26R3nQ5u8gXOR4F5/tcoJlPtaWHubKtbCrxdtSQbexk7pi:7KzBqIUb6cgw46Ot0ytbCQQbexkI

    Score
    10/10
    evasionpersistencenjrattrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks