Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

0f7685475c...85.exe

windows7-x64

8

0f7685475c...85.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f7685475c0912b4e9a794fa8eeff885.exe

  • Size

    23KB

  • Sample

    230320-xvxyeafa48

  • MD5

    0f7685475c0912b4e9a794fa8eeff885

  • SHA1

    92ea844bbbd0331df646c3cde3d73b37863df312

  • SHA256

    f41ef98c543024f81a9f443613eae6eb09de3c7a310b8794ecc9baec31999ca2

  • SHA512

    2c90bf5f13cdbfd33857f1f0d214b8ee537b3fca09fdbdae727eb45db1f97a5c59f738252cceb2d31fa517b7cd25053af8c8e35fe1cdcae3161d52d50961f929

  • SSDEEP

    384:X8aLWS0dABLYVq6RxP8MDFF09vK563gRMmJKUv0mRvR6JZlbw8hqIusZzZ3l:sXcwt3tRpcnuW

Score
10/10
njratlammerevasiontrojan

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Lammer

C2

193.161.193.99:1194

Mutex

2bdc64e35645725dda7c2848c3fe6a0a

Attributes
  • reg_key

    2bdc64e35645725dda7c2848c3fe6a0a

  • splitter

    |'|'|

Targets

    • Target

      0f7685475c0912b4e9a794fa8eeff885.exe

    • Size

      23KB

    • MD5

      0f7685475c0912b4e9a794fa8eeff885

    • SHA1

      92ea844bbbd0331df646c3cde3d73b37863df312

    • SHA256

      f41ef98c543024f81a9f443613eae6eb09de3c7a310b8794ecc9baec31999ca2

    • SHA512

      2c90bf5f13cdbfd33857f1f0d214b8ee537b3fca09fdbdae727eb45db1f97a5c59f738252cceb2d31fa517b7cd25053af8c8e35fe1cdcae3161d52d50961f929

    • SSDEEP

      384:X8aLWS0dABLYVq6RxP8MDFF09vK563gRMmJKUv0mRvR6JZlbw8hqIusZzZ3l:sXcwt3tRpcnuW

    Score
    10/10
    evasionnjrattrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Modifies Windows Firewall

      evasion

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks