Extracted

• • Target

    splwow64.exe

  • Size

    89KB

  • MD5

    a46e3a000ca82c5d2a7e6058f8a04a6c

  • SHA1

    884591c7815b7db86a171188acb9b62631636e06

  • SHA256

    c4b37931430ff96bbfe77cc77658e6d4f552930d5f7d16ae376e2332d2d42734

  • SHA512

    3dd2236c21a77e2c0a6477a5281fdb3192272760efdc037f0c4f4c28981e1fe9630c0dae5de803d00a8eaee7ef367023cba638faf104735d7ec3bd590da8d8c1

  • SSDEEP

    1536:LhpbXXqwJcvVto3dS9uPsCerVt3A7HPd4n+lbeRZIbSQPYZ:LhpjqwOVtwdS9uPs3HQbPRyZ2pPYZ

  Score

  10^/10

  njratvictimdiscoverytrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Downloads MZ/PE file

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1