Overview

overview

10

Static

static

3

3218644f13...8b.exe

windows7-x64

10

3218644f13...8b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84ad1dd49843929ebb768f91bee9011a.bin

  • Size

    12KB

  • Sample

    240124-dfghbsggar

  • MD5

    43b3658f53f65ce5ec1d53618d8f2d15

  • SHA1

    e19d21c6da3bf747113932010e7e373549c3a33f

  • SHA256

    33653d90bd24a3afd539d6c9d789f12ca532d5553d432a008abf9d250911f105

  • SHA512

    d820ed6afe20a13111818d29f475386059e5bae39d739bad89cc561df50b4e03046038df14698e636ec25f5c4aabb598b33f7837b187e3b3fe9ed684e6678f35

  • SSDEEP

    384:TtIiXF+sYZd6uwRo2tCsdD/AoggRI8iK0xB5EF:TtrXF+7cR3FCyuxBE

Score
10/10
njratpersistencetrojan

Malware Config

Targets

    • Target

      3218644f13ca1ba71cf2075b441d9c511b3475d8fde45231eda86dc2f5bf798b.exe

    • Size

      36KB

    • MD5

      84ad1dd49843929ebb768f91bee9011a

    • SHA1

      5127eb26840bc484d711945ddf3ae60c55ecabf4

    • SHA256

      3218644f13ca1ba71cf2075b441d9c511b3475d8fde45231eda86dc2f5bf798b

    • SHA512

      2338a403402bfeb9876b50f461542e1d0df11acbcd17d3335b0536cd4c987a7206c85857f24d4f7441348268732a79e5040bbb92b4a28a023ba8705b11c80370

    • SSDEEP

      384:fkLd2LzreBCAuKiEZePC45SY2OzRLTm3yilqr6LBbmyvGj:fyizrecPEZeK45SssnvGj

    Score
    10/10
    njratpersistencetrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks