Overview

overview

10

Static

static

10

NEAS.b46e4...90.exe

windows7-x64

10

NEAS.b46e4...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b46e4fbfba7a10fae924c6b2d0ffe490.exe

  • Size

    337KB

  • Sample

    231014-xt7q8agh64

  • MD5

    b46e4fbfba7a10fae924c6b2d0ffe490

  • SHA1

    71a3044707da47aeb8dff00fb954f6cbbd51e7a1

  • SHA256

    ee09aa8f39c99bdc08e72374939b582580ab0d277f72938b2b7be2d8ae136cfe

  • SHA512

    07be9618285d74150ec440209c0f27812bc13531e31b7d52fc776935349ee144772cb05ac9b70b7b876b920d07192eea35de14a1538bb65a534b74899d2ed485

  • SSDEEP

    3072:9rLxDR+6SkWygYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:959SLy1+fIyG5jZkCwi8r

Score
10/10
njratpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b46e4fbfba7a10fae924c6b2d0ffe490.exe

    • Size

      337KB

    • MD5

      b46e4fbfba7a10fae924c6b2d0ffe490

    • SHA1

      71a3044707da47aeb8dff00fb954f6cbbd51e7a1

    • SHA256

      ee09aa8f39c99bdc08e72374939b582580ab0d277f72938b2b7be2d8ae136cfe

    • SHA512

      07be9618285d74150ec440209c0f27812bc13531e31b7d52fc776935349ee144772cb05ac9b70b7b876b920d07192eea35de14a1538bb65a534b74899d2ed485

    • SSDEEP

      3072:9rLxDR+6SkWygYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:959SLy1+fIyG5jZkCwi8r

    Score
    10/10
    njratpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks