Extracted

• • Target

    033f904b1ecc36506d36d2086727a173

  • Size

    11.2MB

  • MD5

    033f904b1ecc36506d36d2086727a173

  • SHA1

    15e380be3c0af007889acadaa566a8d141b8ca12

  • SHA256

    f8fa3037e4d71e443953e6314bc17ca07acb256512891ae536fa22778b5e09a5

  • SHA512

    b48d18674f27df88063266938aecf79eb41c0ac013073c11224481514178b0f73209ab519e84c37d4fee8ad8babd00fc8e8e2d2145ecaafed756b62edf890db5

  • SSDEEP

    196608:i8+3Fwk91ITuUsExinAOyEGHyTF4R6GBZlKt5acNS7ElZDOnihAc:iZ3oX7x0TKMF4RrZ/FAPDOk

  Score

  10^/10

  neshtanjrathackedpersistencespywaretrojan

  • Detect Neshta payload

  • Neshta

    Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    persistencespywareneshta

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2