Extracted

• • Target

    Payload.exe

  • Size

    27KB

  • MD5

    9005619d418478002b174e71ec8c5d91

  • SHA1

    3de0f5d8233fa600f47a21ddc80ec6da46dee8f9

  • SHA256

    7a59d8a5718b10f01cb62c80e7b926ee5446b58e3ad2d30661fc397ba7820e17

  • SHA512

    f8240601319e88433c3b97572827fdda17a54c7e707e1abb02f13c23ce68bc292a4cf642cbbd4e59ca29617f574ec81d2252aed17f995962d2903a08e480a2a9

  • SSDEEP

    384:aLB2ZoTmgEJLbwvqWGbPxZh7M9AQk93vmhm7UMKmIEecKdbXTzm9bVhcaUQ6Yr6s:EMNvwj9A/vMHTi9bDU

  Score

  10^/10

  persistencenjratvictemtrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Drops startup file

  • Adds Run key to start application

    persistence
  behavioral1behavioral2