Overview

overview

10

Static

static

10

e6d8e3072c...0N.exe

windows7-x64

10

e6d8e3072c...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e6d8e3072c2f5dceb834de51dbc94df0N.exe

  • Size

    337KB

  • Sample

    240830-zpv8qswcjn

  • MD5

    e6d8e3072c2f5dceb834de51dbc94df0

  • SHA1

    30056f3f98894383365047993a15d9b2e1040055

  • SHA256

    893e2515b6599775a502492c43470e7800bb421472ed40932ad3a95dfb0dab1f

  • SHA512

    509cf0ebca8aa58805d15481843dd37f716f80c1e7863ab934ba825a7df7104920a5c2430f051e884a7ca9eb939671b836a629a0351a251645064ce62212a5d5

  • SSDEEP

    3072:jjVEzbIoaOgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:NEzbqO1+fIyG5jZkCwi8r

Score
10/10
njratdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      e6d8e3072c2f5dceb834de51dbc94df0N.exe

    • Size

      337KB

    • MD5

      e6d8e3072c2f5dceb834de51dbc94df0

    • SHA1

      30056f3f98894383365047993a15d9b2e1040055

    • SHA256

      893e2515b6599775a502492c43470e7800bb421472ed40932ad3a95dfb0dab1f

    • SHA512

      509cf0ebca8aa58805d15481843dd37f716f80c1e7863ab934ba825a7df7104920a5c2430f051e884a7ca9eb939671b836a629a0351a251645064ce62212a5d5

    • SSDEEP

      3072:jjVEzbIoaOgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:NEzbqO1+fIyG5jZkCwi8r

    Score
    10/10
    njratdiscoverypersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks