General

  • Target

    8e15185d1e7a92e32704fe008972488556b7fbf9442f2a473ceb297b21f0b108

  • Size

    337KB

  • Sample

    240531-aq8g1sgh86

  • MD5

    fe1068a33cc1081e928e916851a86e5e

  • SHA1

    cf36391f717524a24d6300ce4b892afbc1e00e15

  • SHA256

    8e15185d1e7a92e32704fe008972488556b7fbf9442f2a473ceb297b21f0b108

  • SHA512

    c3219421fd87bc6ea31e5571b2092f0fb2680caf25e99f156e5048612019b7b38ffcf8e2f75568e2fe725700814eff18af69757a7d42c89843b93a489ada4d50

  • SSDEEP

    3072:nT1J+msLAE0MSgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:TqJ8E7S1+fIyG5jZkCwi8r

Malware Config

Targets

    • Target

      8e15185d1e7a92e32704fe008972488556b7fbf9442f2a473ceb297b21f0b108

    • Size

      337KB

    • MD5

      fe1068a33cc1081e928e916851a86e5e

    • SHA1

      cf36391f717524a24d6300ce4b892afbc1e00e15

    • SHA256

      8e15185d1e7a92e32704fe008972488556b7fbf9442f2a473ceb297b21f0b108

    • SHA512

      c3219421fd87bc6ea31e5571b2092f0fb2680caf25e99f156e5048612019b7b38ffcf8e2f75568e2fe725700814eff18af69757a7d42c89843b93a489ada4d50

    • SSDEEP

      3072:nT1J+msLAE0MSgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:TqJ8E7S1+fIyG5jZkCwi8r

    • Adds autorun key to be loaded by Explorer.exe on startup

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks