Extracted

• • Target

    aaa.exe

  • Size

    23KB

  • MD5

    dd20d42a1555ecd374d47c41bfab8417

  • SHA1

    374e9490ab73d7e9d0cf225d0e96d2ca77becbfb

  • SHA256

    c37bcf56f3404eee897781ecdf994f8c733dcc0a402fa21bd440756a1467ae83

  • SHA512

    a260e1b7de92028aff2b379972f9199948460dcc1d81ce86389226edeef3559f8fed2f468da998172374690efb414559ec4e8528be746d0e955136d91e52266b

  • SSDEEP

    384:QMK6b2GZsx/Yr1+liORH1kcPFQ6Lg9gSOYRr9mRvR6JZlbw8hqIusZzZKm:zb9glF51LRpcnuW

  Score

  10^/10

  njratevasionpersistencetrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Modifies Windows Firewall

    evasion

  • Adds Run key to start application

    persistence
  behavioral1behavioral2