Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

5b86cbad21...65.exe

windows7-x64

10

5b86cbad21...65.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b86cbad21d81626db92220fbed7a465

  • Size

    25KB

  • Sample

    240114-wysx7acdel

  • MD5

    5b86cbad21d81626db92220fbed7a465

  • SHA1

    124dcfaa2fa3d1bb17af97249ddd49b566fdbfc3

  • SHA256

    ef628a6511f0a9fe1effcb71b5ca1fd4be85c85da8fb18d5f30de3c27e8e1bb6

  • SHA512

    6297cb2d0592fc25102f98a7703c130eb6fee67c9286a585f115f8252cc02533a32b4ad288ee50331e9e46792c648e1e515c2011170002fb67b8fd61d5984343

  • SSDEEP

    384:sv3ZI++mmHgOC69Qlr4XU1lL2IVJinVcVcp0jW9h2HbmdPvo8I6CQYtIdgDxpf:svpwhHB2r/1c4IFpdgwvj1CzI+Fpf

Score
10/10
njratflans modtrojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

flans mod

C2

127.0.0.1:25565

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      5b86cbad21d81626db92220fbed7a465

    • Size

      25KB

    • MD5

      5b86cbad21d81626db92220fbed7a465

    • SHA1

      124dcfaa2fa3d1bb17af97249ddd49b566fdbfc3

    • SHA256

      ef628a6511f0a9fe1effcb71b5ca1fd4be85c85da8fb18d5f30de3c27e8e1bb6

    • SHA512

      6297cb2d0592fc25102f98a7703c130eb6fee67c9286a585f115f8252cc02533a32b4ad288ee50331e9e46792c648e1e515c2011170002fb67b8fd61d5984343

    • SSDEEP

      384:sv3ZI++mmHgOC69Qlr4XU1lL2IVJinVcVcp0jW9h2HbmdPvo8I6CQYtIdgDxpf:svpwhHB2r/1c4IFpdgwvj1CzI+Fpf

    Score
    10/10
    njratflans modtrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks