Extracted

• • Target

    cd904c26898bafc784c8478b8535cff623f4f42c80bae27d97307fb3b90397d0

  • Size

    752KB

  • MD5

    453ad7a8f4bf0ffedc5ef0e45b73510c

  • SHA1

    1b1bff14df6326f46b355aafdb988c8f92b6fe4b

  • SHA256

    cd904c26898bafc784c8478b8535cff623f4f42c80bae27d97307fb3b90397d0

  • SHA512

    0add258f4118d01f5cbd74075a69f99ff366e8f470a6ee7fdded75716c72ac13fa630c63a2652e2bd42e1d19c398e1ac8930c32e2eb83350ff9414b316b62bcb

  • SSDEEP

    12288:KS2hAvVLLjdwYXQcToP3K7yvwZxtduJfP5W/61MPKt38Tzgjo2qF7:0ALLjd3XQcUIN0NBW/6FSUM2G

  Score

  10^/10

  njrathacked_by_mohamed_adelevasionpersistencetrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Executes dropped EXE

  • Modifies Windows Firewall

    evasion

  • Drops startup file

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2