Overview

overview

10

Static

static

3

f2540977c3...3e.exe

windows7-x64

10

f2540977c3...3e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2540977c3b34608047c4b11a8ccd30ab01674e1d9a2d93290447e683f4d0b3e.exe

  • Size

    713KB

  • Sample

    240524-kpq7fsbf3z

  • MD5

    6d9e7dfe7232852fa11e10c22a0a3ca2

  • SHA1

    3054b9b8e28937b14cc600496adf3f92d44578db

  • SHA256

    f2540977c3b34608047c4b11a8ccd30ab01674e1d9a2d93290447e683f4d0b3e

  • SHA512

    aeec0d0d1dd863fae3adafbc4589c4f49af1addb14d29e2d0a85815e68609ccea66e27d532e154568ff466ce984f9392b907d6875e359304defe5256a45e4970

  • SSDEEP

    6144:SsH4OjsU9q5eYEkRvPbD1r42soGOaWUcOf6mwR:SI49QYtvv1rarWWwR

Score
10/10
njratmicrosoftphishingtrojan

Malware Config

Targets

    • Target

      f2540977c3b34608047c4b11a8ccd30ab01674e1d9a2d93290447e683f4d0b3e.exe

    • Size

      713KB

    • MD5

      6d9e7dfe7232852fa11e10c22a0a3ca2

    • SHA1

      3054b9b8e28937b14cc600496adf3f92d44578db

    • SHA256

      f2540977c3b34608047c4b11a8ccd30ab01674e1d9a2d93290447e683f4d0b3e

    • SHA512

      aeec0d0d1dd863fae3adafbc4589c4f49af1addb14d29e2d0a85815e68609ccea66e27d532e154568ff466ce984f9392b907d6875e359304defe5256a45e4970

    • SSDEEP

      6144:SsH4OjsU9q5eYEkRvPbD1r42soGOaWUcOf6mwR:SI49QYtvv1rarWWwR

    Score
    10/10
    njrattrojanmicrosoftphishing

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks