Extracted

• • Target

    cbe5a9ffd4128fa7c8ea555455151c7d_JaffaCakes118

  • Size

    43KB

  • MD5

    cbe5a9ffd4128fa7c8ea555455151c7d

  • SHA1

    cd96a814c8e442b7821c0b3b0610f5d074cbf623

  • SHA256

    bd7756e21e511c9722e358d10f5ba298075b31b1c76596701efd9c31a2df8ef5

  • SHA512

    c712d344a38456055541fe095b12bced7fe0305e3612d96e8fa3d4b393d1a2547fcd20d2f050959fbe6a2b2b00c1658fdf7f5e94edf5b2d2204ec0f43b7029bb

  • SSDEEP

    384:KZyz+FgpWoy7A3914YiElIHAknzYIij+ZsNO3PlpJKkkjh/TzF7pWnI/greT0pqD:IxWol7891BEgMuXQ/ol/+L

  Score

  10^/10

  njrathackeddiscoverypersistencetrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Drops startup file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2