General

  • Target

    8f0f667cad1a4cd67368b79038ed9190N.exe

  • Size

    337KB

  • Sample

    240731-jy8meszblb

  • MD5

    8f0f667cad1a4cd67368b79038ed9190

  • SHA1

    9e00451d6d30d3ad8b4c47180f930ce8c5c4fe73

  • SHA256

    cf1f4786062fabbd4d9b5f95c190745f3e3d1dd5bab5f65da9d747a1178cf4da

  • SHA512

    0919dacc0def1b51b4b32914238e93f67be0e69218d008192d7ae4b7ea24e497cdf069c8948353d890007e6b3e33b46083d420c197eb5fa643ae81bc2040f13a

  • SSDEEP

    3072:PV2lSJOv7NIf0XgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:YwODNDX1+fIyG5jZkCwi8r

Malware Config

Targets

    • Target

      8f0f667cad1a4cd67368b79038ed9190N.exe

    • Size

      337KB

    • MD5

      8f0f667cad1a4cd67368b79038ed9190

    • SHA1

      9e00451d6d30d3ad8b4c47180f930ce8c5c4fe73

    • SHA256

      cf1f4786062fabbd4d9b5f95c190745f3e3d1dd5bab5f65da9d747a1178cf4da

    • SHA512

      0919dacc0def1b51b4b32914238e93f67be0e69218d008192d7ae4b7ea24e497cdf069c8948353d890007e6b3e33b46083d420c197eb5fa643ae81bc2040f13a

    • SSDEEP

      3072:PV2lSJOv7NIf0XgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:YwODNDX1+fIyG5jZkCwi8r

    • Adds autorun key to be loaded by Explorer.exe on startup

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks