Overview

overview

10

Static

static

10

27c0a485f1...6b.exe

windows7-x64

10

27c0a485f1...6b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27c0a485f1943df739ac9e936d29a5397fb3d2e02f126fb97e528b57bbb7266b

  • Size

    337KB

  • Sample

    240523-yfc55adh76

  • MD5

    b8e17fc8d41aaf5edcae4fa865c0ae01

  • SHA1

    fe31fb0b0a8d6ab4843f45c2642b375ed7443b26

  • SHA256

    27c0a485f1943df739ac9e936d29a5397fb3d2e02f126fb97e528b57bbb7266b

  • SHA512

    5affe025b6cbc41b91b3448176c76146b48d951187f937b75878cc4b2b545fde99312ba2d093c04c38e0c89b3d5d043f7eb4e8e7afa2c3f9762cd14715248b73

  • SSDEEP

    3072:A5yeDbmBNqZEgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:A57fm2E1+fIyG5jZkCwi8r

Score
10/10
njratpersistencetrojan

Malware Config

Targets

    • Target

      27c0a485f1943df739ac9e936d29a5397fb3d2e02f126fb97e528b57bbb7266b

    • Size

      337KB

    • MD5

      b8e17fc8d41aaf5edcae4fa865c0ae01

    • SHA1

      fe31fb0b0a8d6ab4843f45c2642b375ed7443b26

    • SHA256

      27c0a485f1943df739ac9e936d29a5397fb3d2e02f126fb97e528b57bbb7266b

    • SHA512

      5affe025b6cbc41b91b3448176c76146b48d951187f937b75878cc4b2b545fde99312ba2d093c04c38e0c89b3d5d043f7eb4e8e7afa2c3f9762cd14715248b73

    • SSDEEP

      3072:A5yeDbmBNqZEgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:A57fm2E1+fIyG5jZkCwi8r

    Score
    10/10
    njratpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks