Extracted

• • Target

    af4b01a3849d9cc08f3b92f0246f0877.exe

  • Size

    43KB

  • MD5

    af4b01a3849d9cc08f3b92f0246f0877

  • SHA1

    193232901c159e23ccece3758e8b9ef9586bcbac

  • SHA256

    6c523ef93416b140bba0a146cec6fdfd44d95db5505b913fc5d2837dffe8f5fb

  • SHA512

    6343a6e83605929e8e565920b24c0826ea5526e8716951e411125eef832cc8aba26f2d8834b2122324d1458b0e56bd27b9489fef060af2e269b691175bb2efa1

  • SSDEEP

    384:hZykdFI1STss7yKSXfSGSOEdrpS2dzsIij+ZsNO3PlpJKkkjh/TzF7pWnMbgreTf:znduk4smKSvSpPrkYuXQ/oNb+L

  Score

  10^/10

  njratsluhapersistencetrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Drops startup file

  • Adds Run key to start application

    persistence

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2