Extracted

• • Target

    81bd058bdfbfc79e61c1886729fb82f958fec8d935f94a719e42d5cf41282e81

  • Size

    37KB

  • MD5

    32ecbfcd1b769c857657f0455bfae8de

  • SHA1

    23f3a0fa867d4655d5b60af33494426c1c26980a

  • SHA256

    81bd058bdfbfc79e61c1886729fb82f958fec8d935f94a719e42d5cf41282e81

  • SHA512

    cb61ee071ed5d47e71100198bf52099005c4af8ab91252212a5fdf5400bc987519d9c4447a09edb9c810961b989791acfffe136a2ade4206c60689b4e22c91ef

  • SSDEEP

    384:CkG23hUidkGXR21cGMy8Pqq53tGFlymkirAF+rMRTyN/0L+EcoinblneHQM3epz3:rG23ZLGv8Pqq58imHrM+rMRa8NuImt

  Score

  10^/10

  njrathackedevasiontrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Executes dropped EXE

  • Modifies Windows Firewall

    evasion

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1