Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

16/07/2024, 00:43

240716-a232nsxckr 10

16/07/2024, 00:41

240716-a16q6szdmc 10

16/07/2024, 00:38

240716-azamcazcpc 10

15/07/2024, 20:46

240715-zkpv6a1dlh 10

General

  • Target

    0928f36599b47ba66582d1f5a5cb6fb0N.exe

  • Size

    23KB

  • Sample

    240716-azamcazcpc

  • MD5

    0928f36599b47ba66582d1f5a5cb6fb0

  • SHA1

    bef519e4db670bbea44d8cba6cbf104050ae551d

  • SHA256

    7833bf16b7c7c64dff43ca86f7ef1119284cedbc43fc7c31184d531b17e6bbf0

  • SHA512

    edf35a5457744d7792c8d4ea5d99e8e3beecef2a516a18f0296891d6f4baf3bf543cf00ba63a11aac5ad18af2567aa8781e840e339d80097d8e7a2e837b8ca3e

  • SSDEEP

    384:/oWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZI2:Y7O89p2rRpcnuY

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

10.10.1.11:5552

Mutex

7657c14284185fbd3fb108b43c7467ba

Attributes
  • reg_key

    7657c14284185fbd3fb108b43c7467ba

  • splitter

    |'|'|

Targets

    • Target

      0928f36599b47ba66582d1f5a5cb6fb0N.exe

    • Size

      23KB

    • MD5

      0928f36599b47ba66582d1f5a5cb6fb0

    • SHA1

      bef519e4db670bbea44d8cba6cbf104050ae551d

    • SHA256

      7833bf16b7c7c64dff43ca86f7ef1119284cedbc43fc7c31184d531b17e6bbf0

    • SHA512

      edf35a5457744d7792c8d4ea5d99e8e3beecef2a516a18f0296891d6f4baf3bf543cf00ba63a11aac5ad18af2567aa8781e840e339d80097d8e7a2e837b8ca3e

    • SSDEEP

      384:/oWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZI2:Y7O89p2rRpcnuY

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Modifies Windows Firewall

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks