Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

1e15599841...cd.exe

windows7-x64

10

1e15599841...cd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1e15599841999bf17e13b35c788489cd

  • Size

    124KB

  • Sample

    231230-14jc6acca4

  • MD5

    1e15599841999bf17e13b35c788489cd

  • SHA1

    21460a1c90ba2a8cb21e1419f10068b4ef4baa14

  • SHA256

    757d5c44cf044ca61b8402e96f8b8ae40e2cec3bd7fe7d78f24b77b44aa2ee95

  • SHA512

    154f7f8e2b85824b8bafa1c5ef589670031b58d4e1c037705fbd3deb08dfda8f10c96475f9859bbfcaf6ca081316569fad86e6764875ba997a67dc323c800267

  • SSDEEP

    1536:mgJ+ABB2abuvLng2F6rhKTYCpqwJSzvOy9OqS:lIABEabqg2F6R

Score
10/10
njratkerieshkapersistencetrojan

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Kerieshka

C2

2.tcp.ngrok.io:10497

Mutex

95fdec38e3b8066027596a6d420c4af3

Attributes
  • reg_key

    95fdec38e3b8066027596a6d420c4af3

  • splitter

    |'|'|

Targets

    • Target

      1e15599841999bf17e13b35c788489cd

    • Size

      124KB

    • MD5

      1e15599841999bf17e13b35c788489cd

    • SHA1

      21460a1c90ba2a8cb21e1419f10068b4ef4baa14

    • SHA256

      757d5c44cf044ca61b8402e96f8b8ae40e2cec3bd7fe7d78f24b77b44aa2ee95

    • SHA512

      154f7f8e2b85824b8bafa1c5ef589670031b58d4e1c037705fbd3deb08dfda8f10c96475f9859bbfcaf6ca081316569fad86e6764875ba997a67dc323c800267

    • SSDEEP

      1536:mgJ+ABB2abuvLng2F6rhKTYCpqwJSzvOy9OqS:lIABEabqg2F6R

    Score
    10/10
    njratkerieshkapersistencetrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks