Extracted

• • Target

    NeverLoseByOxy.exe

  • Size

    667KB

  • MD5

    25a325fd2dbf83e97572593fe0529743

  • SHA1

    dff4df26a8a35e8bd606fab10940ec87ab6f4829

  • SHA256

    8db43b34a8067f3546ccebbbd40befbec842f3c03efed5057f90d60ef4f31cbc

  • SHA512

    4d1a757b7de770bd7ce5c735acfdf1abdf1a4835c99a57d72d75f424872b5e66e11d3b795d2fe44aaf391f24a28cc991e18b2f6fe538c94e6308be1813078b24

  • SSDEEP

    12288:/BdlwHRn+WlYV+rnxh1HTT78E/GYidhRto:/BkVdlYADRHL8E/GYyo

  Score

  10^/10

  njratoxy greenevasionpersistencetrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Modifies Windows Firewall

    evasion

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2