Overview

overview

10

Static

static

b42314c9cd...9a.exe

windows7-x64

10

b42314c9cd...9a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b42314c9cd1826c4ed8daa6aa8449023295ea3617765c7a01c142602817f459a

  • Size

    78KB

  • Sample

    221003-q2wwcshggp

  • MD5

    6bfc893d8c55135991684d2a1f22a870

  • SHA1

    8547449eda6fe1e3ffb436ff1376b6300a3ffbfb

  • SHA256

    b42314c9cd1826c4ed8daa6aa8449023295ea3617765c7a01c142602817f459a

  • SHA512

    c8bcd2b259432c6d4eab48d7266538ea975ec6f4245b99906b5e5d33a2cbd810b67866b675cdc1da91b4e3dee24edaee824cecccb9981e1061ffe6720d1a81c1

  • SSDEEP

    1536:qpye12WOmLwbCNwys6DGY9cabWdsbAwF6TQuLMmeQSdRmZv1V:qpye12KwUfDoabWYBF6JLMm/Sdw1V

Score
10/10
njratevasiontrojan

Malware Config

Targets

    • Target

      b42314c9cd1826c4ed8daa6aa8449023295ea3617765c7a01c142602817f459a

    • Size

      78KB

    • MD5

      6bfc893d8c55135991684d2a1f22a870

    • SHA1

      8547449eda6fe1e3ffb436ff1376b6300a3ffbfb

    • SHA256

      b42314c9cd1826c4ed8daa6aa8449023295ea3617765c7a01c142602817f459a

    • SHA512

      c8bcd2b259432c6d4eab48d7266538ea975ec6f4245b99906b5e5d33a2cbd810b67866b675cdc1da91b4e3dee24edaee824cecccb9981e1061ffe6720d1a81c1

    • SSDEEP

      1536:qpye12WOmLwbCNwys6DGY9cabWdsbAwF6TQuLMmeQSdRmZv1V:qpye12KwUfDoabWYBF6JLMm/Sdw1V

    Score
    10/10
    njratevasiontrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks