Overview

overview

10

Static

static

10

8bbcb926dd...b6.exe

windows7-x64

10

8bbcb926dd...b6.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8bbcb926dd9192c2f22082e57324efa93d423543adb2fe83fff12ef26cc72bb6

  • Size

    337KB

  • Sample

    240420-abma8sbg91

  • MD5

    cc043e8db57f23fcad804d9b3fa420b0

  • SHA1

    77d7f388bb7c78d0c55056215e33e79e82080ebe

  • SHA256

    8bbcb926dd9192c2f22082e57324efa93d423543adb2fe83fff12ef26cc72bb6

  • SHA512

    5be8eb4eed019782cc44a97a602f6c84a5008e105abc7482ee7174c082c0e57f6c1198143196be21c1e55ac8139c2286e501148aa1728a69765342f65f9760fb

  • SSDEEP

    3072:wUsgU5bve3JAJswM3vyZt1ZN9/21fwkPgLgYfc0DV+1BIyLK5jZWlfXXqyYwi8xZ:11lwk4L1+fIyG5jZkCwi8r

Score
10/10
njratpersistencetrojan

Malware Config

Targets

    • Target

      8bbcb926dd9192c2f22082e57324efa93d423543adb2fe83fff12ef26cc72bb6

    • Size

      337KB

    • MD5

      cc043e8db57f23fcad804d9b3fa420b0

    • SHA1

      77d7f388bb7c78d0c55056215e33e79e82080ebe

    • SHA256

      8bbcb926dd9192c2f22082e57324efa93d423543adb2fe83fff12ef26cc72bb6

    • SHA512

      5be8eb4eed019782cc44a97a602f6c84a5008e105abc7482ee7174c082c0e57f6c1198143196be21c1e55ac8139c2286e501148aa1728a69765342f65f9760fb

    • SSDEEP

      3072:wUsgU5bve3JAJswM3vyZt1ZN9/21fwkPgLgYfc0DV+1BIyLK5jZWlfXXqyYwi8xZ:11lwk4L1+fIyG5jZkCwi8r

    Score
    10/10
    njratpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks