Overview

overview

10

Static

static

3

cryptedfile.exe

windows7-x64

10

cryptedfile.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cryptedfile.exe

  • Size

    418KB

  • Sample

    240313-ntjvqaca7y

  • MD5

    4826f9695be9d30cc7ab41e08ef55219

  • SHA1

    565e8c2e3933f6410b14e20c2f80e9f3436977f2

  • SHA256

    4c426b57772aa2d212791ab542196910baf6c66120d0353b5bb2bfb6a5214717

  • SHA512

    705d2b02b1aaac665a4420b0c78e8328ad738634c3f0390c05a0d919205eb995687ceb5b57b7a2d36c8c0ac76d10fa45563ec7c32dd2937a98c533181e4eedc7

  • SSDEEP

    12288:OREkD5DFr/cp9gxh/xiAa5HLL4UYUdcpc3RrC2HvGjyuXAu:OR1vUbXKyup

Score
10/10
njrattrojan

Malware Config

Targets

    • Target

      cryptedfile.exe

    • Size

      418KB

    • MD5

      4826f9695be9d30cc7ab41e08ef55219

    • SHA1

      565e8c2e3933f6410b14e20c2f80e9f3436977f2

    • SHA256

      4c426b57772aa2d212791ab542196910baf6c66120d0353b5bb2bfb6a5214717

    • SHA512

      705d2b02b1aaac665a4420b0c78e8328ad738634c3f0390c05a0d919205eb995687ceb5b57b7a2d36c8c0ac76d10fa45563ec7c32dd2937a98c533181e4eedc7

    • SSDEEP

      12288:OREkD5DFr/cp9gxh/xiAa5HLL4UYUdcpc3RrC2HvGjyuXAu:OR1vUbXKyup

    Score
    10/10
    njrattrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks