Overview

overview

10

Static

static

3

bTtg.exe

windows7-x64

10

bTtg.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bTtg.exe

  • Size

    36KB

  • Sample

    240201-qc774afhen

  • MD5

    d6852487b3202804712e31658812c615

  • SHA1

    9c51a0c34adb90b4dc6cc584638b44d0a23f203e

  • SHA256

    82c4d751fd2cb6c9e75e7c3618fda2768e79af54a98d196e09a929ad13811863

  • SHA512

    ceb44c60fe1c1a56839331fa6179a198bd5613f68d7b3a28b406176603bc23f9045246d813a3af4c74fba18de0ba19f530c2c6a9995352472ed853bd4806b48d

  • SSDEEP

    384:JLd2LzreBCAuKiEZePC45SY2OzRLTm3yilqr6LbbjyvGj:5izrecPEZeK45Sss2vGj

Score
10/10
njratpersistencetrojan

Malware Config

Targets

    • Target

      bTtg.exe

    • Size

      36KB

    • MD5

      d6852487b3202804712e31658812c615

    • SHA1

      9c51a0c34adb90b4dc6cc584638b44d0a23f203e

    • SHA256

      82c4d751fd2cb6c9e75e7c3618fda2768e79af54a98d196e09a929ad13811863

    • SHA512

      ceb44c60fe1c1a56839331fa6179a198bd5613f68d7b3a28b406176603bc23f9045246d813a3af4c74fba18de0ba19f530c2c6a9995352472ed853bd4806b48d

    • SSDEEP

      384:JLd2LzreBCAuKiEZePC45SY2OzRLTm3yilqr6LbbjyvGj:5izrecPEZeK45Sss2vGj

    Score
    10/10
    njratpersistencetrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks