Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

c91ee9c3b3...e7.exe

windows7-x64

10

c91ee9c3b3...e7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c91ee9c3b3408d397b2fd36b4f09e715932fdd722a42829ef81451690f1844e7

  • Size

    28KB

  • Sample

    221029-ad6gwsche7

  • MD5

    070366b1e13d0db607bf91ce11d3f1a0

  • SHA1

    1b43ac3d2adb907cb22efef2c9e8ad6166a831a0

  • SHA256

    c91ee9c3b3408d397b2fd36b4f09e715932fdd722a42829ef81451690f1844e7

  • SHA512

    4a139242cf56c5d193d8daf8145dee890436bf9540d0c758aa7d1fc1868339cf6dec2a2361d08820286a9956cd7138fab6ba9537544b722c32470482aeb8a0f3

  • SSDEEP

    384:MaFCtl7Dh+oqIqEXV5HEQTGumqDgN3eH6GBsbh0w4wlAokw9OhgOL1vYRGOZzCZW:m74oqIjlLTAqM3eFBKh0p29SgREW

Score
10/10
njrathackedevasiontrojan

Malware Config

Extracted

Family

njrat

Version

0.6.4

Botnet

HacKed

C2

topsayed223.no-ip.biz:1177

Mutex

6af29fbbfed65718b18fac14bbf76b5c

Attributes
  • reg_key

    6af29fbbfed65718b18fac14bbf76b5c

  • splitter

    |'|'|

Targets

    • Target

      c91ee9c3b3408d397b2fd36b4f09e715932fdd722a42829ef81451690f1844e7

    • Size

      28KB

    • MD5

      070366b1e13d0db607bf91ce11d3f1a0

    • SHA1

      1b43ac3d2adb907cb22efef2c9e8ad6166a831a0

    • SHA256

      c91ee9c3b3408d397b2fd36b4f09e715932fdd722a42829ef81451690f1844e7

    • SHA512

      4a139242cf56c5d193d8daf8145dee890436bf9540d0c758aa7d1fc1868339cf6dec2a2361d08820286a9956cd7138fab6ba9537544b722c32470482aeb8a0f3

    • SSDEEP

      384:MaFCtl7Dh+oqIqEXV5HEQTGumqDgN3eH6GBsbh0w4wlAokw9OhgOL1vYRGOZzCZW:m74oqIjlLTAqM3eFBKh0p29SgREW

    Score
    10/10
    njrathackedevasiontrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Modifies Windows Firewall

      evasion

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks