Overview

overview

10

Static

static

3

bTfk.exe

windows7-x64

10

bTfk.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bTfk.exe

  • Size

    36KB

  • Sample

    240122-ywjb3sdda8

  • MD5

    75e7abbc617cf3dbcb68b2bd43d03115

  • SHA1

    182af2e118f11a3a50bc3eec4deb70b22e4faed7

  • SHA256

    77467ced122704b311807b5da3c575217a903e2434bf04c47c0ebf00c19ae474

  • SHA512

    be174023d37f4229cf4474bfe638686e5c3165d0e7f17bea1b0e9d8860a006640e82667ea6066aa24d5fa4b3b3ffdc70256f804c5abf8ed1d23efff1d22acc13

  • SSDEEP

    384:CLd2LzreBCAuKiEZePC45SY2OzRLTm3yilqr6LUbOyvGj:cizrecPEZeK45SssIvGj

Score
10/10
njratpersistencetrojan

Malware Config

Targets

    • Target

      bTfk.exe

    • Size

      36KB

    • MD5

      75e7abbc617cf3dbcb68b2bd43d03115

    • SHA1

      182af2e118f11a3a50bc3eec4deb70b22e4faed7

    • SHA256

      77467ced122704b311807b5da3c575217a903e2434bf04c47c0ebf00c19ae474

    • SHA512

      be174023d37f4229cf4474bfe638686e5c3165d0e7f17bea1b0e9d8860a006640e82667ea6066aa24d5fa4b3b3ffdc70256f804c5abf8ed1d23efff1d22acc13

    • SSDEEP

      384:CLd2LzreBCAuKiEZePC45SY2OzRLTm3yilqr6LUbOyvGj:cizrecPEZeK45SssIvGj

    Score
    10/10
    njratpersistencetrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks