Extracted

• • Target

    bd4b1ccafd3ffcca49961c010d8abed5_JaffaCakes118

  • Size

    47KB

  • MD5

    bd4b1ccafd3ffcca49961c010d8abed5

  • SHA1

    e49c6d2c4e77e782f8f6afcfa1a34fedb6b67586

  • SHA256

    d58f219e40a169eb0bd5338740f1852d690630466b77cd343772f4da12271fd9

  • SHA512

    842d9bccac08d44bca271230a655f351e15425bb64bc925d8ddc8bf418b2586258cef50c1d54c1de1930b4d435821b752134ecb6ebb9a999b8acdec238f27b4f

  • SSDEEP

    768:LWu7Rgdz+OQFQvUGB6T8PEKi6JNf79sdgVR9aPzdADDrDyhss92vxboECSB0RDYp:JAqTA9naPz2vxboECSBMzK2uae

  Score

  10^/10

  njrathackedtrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2