Overview

overview

10

Static

static

3

82c4d751fd...63.exe

windows7-x64

10

82c4d751fd...63.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    772c6c188a8f64f8a71bfd522a909ef2a452e100a47c9ff00559a3c02f5188a3

  • Size

    12KB

  • Sample

    240419-v7465sah48

  • MD5

    7ed54968dc31f48a664c29f7be3096aa

  • SHA1

    af642cd31b33b20c9c786f93b1d52fd3b1bb9e49

  • SHA256

    772c6c188a8f64f8a71bfd522a909ef2a452e100a47c9ff00559a3c02f5188a3

  • SHA512

    7fb06fdf4391442a0eb0676f7e215d017fc088af0a1d333537fa8c7fb7c87bafc2560000bfe805686713df91c1c17597c18f559b4be0b88cac9f88791b275f79

  • SSDEEP

    384:lBmXNwTU37/jIrq1pp7k1EpwrLIRXUdo3h:oFr/j5pIuPh

Score
10/10
njratpersistencetrojan

Malware Config

Targets

    • Target

      82c4d751fd2cb6c9e75e7c3618fda2768e79af54a98d196e09a929ad13811863.exe

    • Size

      36KB

    • MD5

      d6852487b3202804712e31658812c615

    • SHA1

      9c51a0c34adb90b4dc6cc584638b44d0a23f203e

    • SHA256

      82c4d751fd2cb6c9e75e7c3618fda2768e79af54a98d196e09a929ad13811863

    • SHA512

      ceb44c60fe1c1a56839331fa6179a198bd5613f68d7b3a28b406176603bc23f9045246d813a3af4c74fba18de0ba19f530c2c6a9995352472ed853bd4806b48d

    • SSDEEP

      384:JLd2LzreBCAuKiEZePC45SY2OzRLTm3yilqr6LbbjyvGj:5izrecPEZeK45Sss2vGj

    Score
    10/10
    njratpersistencetrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks