Extracted

• • Target

    b6974c625e2a8c07e6202090a0062497_JaffaCakes118

  • Size

    25KB

  • MD5

    b6974c625e2a8c07e6202090a0062497

  • SHA1

    778ce55ed26bd5f9d20d0c29b5d2dc196466de49

  • SHA256

    ac9621b85e5f6b6c1335ea0f71ad93b1cd78bb94f62c36d9c86fc4832fc7aaf0

  • SHA512

    56d8549176aa1d3efd8f3c0a3927b2c76e5075eb036988b2bb58cc43357eca442439b5fa3bcd07de23c348e2d55412b11bcee2ebf7a67fd0ab698e5d75ebb95b

  • SSDEEP

    384:sv3ZIXLSr2xNahL2mfW8oa3hC+WJiBZ2TTJhQzNwsmg4AtzhfOoEUqIOMl6:svp9xfW8xgJiBZ2TdGw17shbkj1

  Score

  10^/10

  njrathackedpersistencetrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Drops startup file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2