Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b9bab88f37b74a18b232fd06e16a59be

  • Size

    72KB

  • Sample

    240307-1lg3daeg58

  • MD5

    b9bab88f37b74a18b232fd06e16a59be

  • SHA1

    3c8510c55af0e68e466827395edfd2a866365976

  • SHA256

    7b64dc11fee888e4ce1a7e23292b7771b6d334589e2d3c133308d3e1b9223b30

  • SHA512

    8bde608701f79d1de29dc9cb7c35574166eae535b07b4b1d4cd21acc94fa8f1db1df95017e006cd581cd2d66216c2e55c4a50b0e87b24e33b63578c499724385

  • SSDEEP

    1536:s/i0wcTZAVpAP8OhljOhcWPN5GzHac5IX8KgZp6m:s/ilclYpAPhhljOhcWPN5GzHac5TDZQm

Score
10/10

Malware Config

Extracted

Family

njrat

Botnet

비응신

Mutex

b9afd8f299a5bc13aeb1afc43c0ef568

Attributes
  • reg_key

    b9afd8f299a5bc13aeb1afc43c0ef568

Targets

    • Target

      b9bab88f37b74a18b232fd06e16a59be

    • Size

      72KB

    • MD5

      b9bab88f37b74a18b232fd06e16a59be

    • SHA1

      3c8510c55af0e68e466827395edfd2a866365976

    • SHA256

      7b64dc11fee888e4ce1a7e23292b7771b6d334589e2d3c133308d3e1b9223b30

    • SHA512

      8bde608701f79d1de29dc9cb7c35574166eae535b07b4b1d4cd21acc94fa8f1db1df95017e006cd581cd2d66216c2e55c4a50b0e87b24e33b63578c499724385

    • SSDEEP

      1536:s/i0wcTZAVpAP8OhljOhcWPN5GzHac5IX8KgZp6m:s/ilclYpAPhhljOhcWPN5GzHac5TDZQm

    Score
    10/10
    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks