Overview

overview

10

Static

static

3

60cbfe535b...a3.exe

windows7-x64

10

60cbfe535b...a3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    489f14468d5f37635822473c012f25325de441c8e4c21b203b92ce764eb71090

  • Size

    12KB

  • Sample

    240419-v1qp6sbd4z

  • MD5

    8c13fd7d9a893121a3e1369397ba8d48

  • SHA1

    5adc093b03ba8ce84a32ee9cbc47375ca3a75272

  • SHA256

    489f14468d5f37635822473c012f25325de441c8e4c21b203b92ce764eb71090

  • SHA512

    75ca11e8681fbd1873fdbb391bd80639efb745ed5c83d5e71c6388aaab190ce3d8bc0935fa166e60e548393c14d4decaec8d8ac5043215c0d3fae88f6da2bb36

  • SSDEEP

    384:PdUvnbicDHlVgChzyerG57QqbiVj7t80Ab:PWeAHlFhg5buVjx83b

Score
10/10
njratpersistencetrojan

Malware Config

Targets

    • Target

      60cbfe535b119b3eab86debda5188f2b6bb3eb0c4e86cbadde4fc8971ef21ca3.exe

    • Size

      36KB

    • MD5

      15c643ee1f546c01e685dba30164489f

    • SHA1

      7b13974fcbd21edcfa0c910d25d27ba1eead8a43

    • SHA256

      60cbfe535b119b3eab86debda5188f2b6bb3eb0c4e86cbadde4fc8971ef21ca3

    • SHA512

      268e63aabbd7f156234f6c920f158d77abe5131b701409348895b709039a63d14199887aa2df0b07f0c06edcfb3ffbd24728973ed0bb034db12fec6e48ed4141

    • SSDEEP

      384:GLd2LzreBCAuKiEZePC45SY2OzRLTm3yilqr6L1bHyvGj:gizrecPEZeK45SssovGj

    Score
    10/10
    njratpersistencetrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks