Overview

overview

10

Static

static

10

043cc459e3...JC.exe

windows7-x64

10

043cc459e3...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    043cc459e3b2527dd77f30fde02bdf70_exe32_JC.exe

  • Size

    337KB

  • Sample

    231015-tg1wcshb6v

  • MD5

    043cc459e3b2527dd77f30fde02bdf70

  • SHA1

    1b9ab90250547b747636a92f3bf9abc94c131d25

  • SHA256

    e4689b22b9a6fca6986262a42f529711249b2c9f95827c0ac3d0282690ac43d2

  • SHA512

    23871d4b4afa56561eb07133fdc666f832519883355e0554f1904f67bfdca32e55c76416d136b296ad71dc026f7595882f1e73bef7959ab70d5420a1419bd70f

  • SSDEEP

    3072:C4Tw3lz8Achwud4PFXkgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:C403l4e1k1+fIyG5jZkCwi8r

Score
10/10
njratpersistencetrojan

Malware Config

Targets

    • Target

      043cc459e3b2527dd77f30fde02bdf70_exe32_JC.exe

    • Size

      337KB

    • MD5

      043cc459e3b2527dd77f30fde02bdf70

    • SHA1

      1b9ab90250547b747636a92f3bf9abc94c131d25

    • SHA256

      e4689b22b9a6fca6986262a42f529711249b2c9f95827c0ac3d0282690ac43d2

    • SHA512

      23871d4b4afa56561eb07133fdc666f832519883355e0554f1904f67bfdca32e55c76416d136b296ad71dc026f7595882f1e73bef7959ab70d5420a1419bd70f

    • SSDEEP

      3072:C4Tw3lz8Achwud4PFXkgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:C403l4e1k1+fIyG5jZkCwi8r

    Score
    10/10
    njratpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks