Overview

overview

10

Static

static

10

New Client.exe

windows7-x64

10

New Client.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    New Client.exe

  • Size

    164KB

  • Sample

    231011-gvya6sfh76

  • MD5

    f08772b3bdde7388a4c43b7e41da5684

  • SHA1

    439cd4653ddbdf9d7433a165f5cd4eb6afe82bcb

  • SHA256

    6e0125f382bf828fbff9e7467a227c0584385395c2cb20a06a4c045f9ac6a43d

  • SHA512

    7776c2894397fae7a1934af7d87513d5e25114a10fd9cbb3fbbcc8fb1512dc68cad8b066dbba7c9462ded0d9c5c70f32d9fca42b18a72a0a2a67fd04755945a3

  • SSDEEP

    3072:0ibn/zRv40/9nUx0EpuCRwzzbEcr5+cbet7lo9Wagc:0i3Ux0EjGz4q5jbKz5

Score
10/10
njratpersistencetrojan

Malware Config

Targets

    • Target

      New Client.exe

    • Size

      164KB

    • MD5

      f08772b3bdde7388a4c43b7e41da5684

    • SHA1

      439cd4653ddbdf9d7433a165f5cd4eb6afe82bcb

    • SHA256

      6e0125f382bf828fbff9e7467a227c0584385395c2cb20a06a4c045f9ac6a43d

    • SHA512

      7776c2894397fae7a1934af7d87513d5e25114a10fd9cbb3fbbcc8fb1512dc68cad8b066dbba7c9462ded0d9c5c70f32d9fca42b18a72a0a2a67fd04755945a3

    • SSDEEP

      3072:0ibn/zRv40/9nUx0EpuCRwzzbEcr5+cbet7lo9Wagc:0i3Ux0EjGz4q5jbKz5

    Score
    10/10
    njratpersistencetrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks