Extracted

• • Target

    Client.exe

  • Size

    31KB

  • MD5

    b10f92570ed1724ebbabd8ec534779f5

  • SHA1

    9584674affe48c8cebf999c970fc071923a4cf07

  • SHA256

    024f6018cd5713c1c84d28917072965da226f0b8632cdda7e519ebd73cb731be

  • SHA512

    f36473ae3051c8c9f9f2da03a3ba568cc33605f7074845d1465b4d4a64f1c43f5b571476765ebda834c7cb6fa86e0723cd868c4f67c20e08b04278001b4cf06a

  • SSDEEP

    768:snhOJb13hdwzxLy34sUOfNMRvy3QmIDUu0tiAPj:qsZ6uR6gQVkjj

  Score

  10^/10

  njrath2cked soulsevasiontrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Modifies Windows Firewall

    evasion

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2