General

  • Target

    11f0441626370fc08ec1dca3c9e42f2ad042d77fb6ddb4ec3d305c21ff7a3269

  • Size

    337KB

  • Sample

    240430-xvdvjaea4z

  • MD5

    0ca47562730934a0fa96f50a9c7caf17

  • SHA1

    ac0d4258653e809b03419c52a706ea11cae3d916

  • SHA256

    11f0441626370fc08ec1dca3c9e42f2ad042d77fb6ddb4ec3d305c21ff7a3269

  • SHA512

    542140bc1870d368aea9539b0330c26e40dbeafaa5e74ac4a556dec5f4bbbb63fe5c2d440174aacb3c7b596e20ad55b01f55d4af07eb59c3c505c533ec33d1b0

  • SSDEEP

    3072:f9ZbHADXEHh35Tc3gYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:fTcXEB3xe1+fIyG5jZkCwi8r

Malware Config

Targets

    • Target

      11f0441626370fc08ec1dca3c9e42f2ad042d77fb6ddb4ec3d305c21ff7a3269

    • Size

      337KB

    • MD5

      0ca47562730934a0fa96f50a9c7caf17

    • SHA1

      ac0d4258653e809b03419c52a706ea11cae3d916

    • SHA256

      11f0441626370fc08ec1dca3c9e42f2ad042d77fb6ddb4ec3d305c21ff7a3269

    • SHA512

      542140bc1870d368aea9539b0330c26e40dbeafaa5e74ac4a556dec5f4bbbb63fe5c2d440174aacb3c7b596e20ad55b01f55d4af07eb59c3c505c533ec33d1b0

    • SSDEEP

      3072:f9ZbHADXEHh35Tc3gYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:fTcXEB3xe1+fIyG5jZkCwi8r

    • Adds autorun key to be loaded by Explorer.exe on startup

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks