Overview

overview

10

Static

static

3

4d3583917f...90.exe

windows7-x64

10

4d3583917f...90.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b739c3eba37aa9999fb2d15ab5b9c680.bin

  • Size

    9.6MB

  • Sample

    231031-db8q1sgb51

  • MD5

    b8bf03903e0fcaeaaa6cb897d846b5cf

  • SHA1

    692c60cb0044f0637974560fefd829b7956f239c

  • SHA256

    a10c7b2ff53a0dd69b61fd972a2830c127347296097b681de5ac374294005463

  • SHA512

    dd54b85d19f1507dc0216b06ae7fef687ad31cdfabccdd35020bbd521856fffbb067069bb2b9d177158c560a23d207de041ea94df2ca29fe4074d146629677ea

  • SSDEEP

    196608:ipaAyxyRem7pScSRYaH/TS64EIIaAGOHt2hxnLZCWh3ub:icAoyoVcda7+8aAIhxnLZL36

Score
10/10
njrattrojan

Malware Config

Targets

    • Target

      4d3583917fb1f539f92f945f0f298b2c1766ac27086275600eab721b8e9fbd90.exe

    • Size

      10.3MB

    • MD5

      b739c3eba37aa9999fb2d15ab5b9c680

    • SHA1

      bb18cc561805efa38545310057bcae4e894d3817

    • SHA256

      4d3583917fb1f539f92f945f0f298b2c1766ac27086275600eab721b8e9fbd90

    • SHA512

      0259b599a7e37426383184110aa828d0797875bab1925186b5b0ca0cb99ed2ae2bceb31f5c83ca3a8ba890bf86bb8cfa75f58d80db3b4ae710828f8ffb36c1ea

    • SSDEEP

      196608:56wcPit+w7T+yuSLoGUpTKQ8LY+TRQf3goX3yCJdpHt:5jSKd/+yuQoGUlQepyCJ

    Score
    10/10
    njrattrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks