Extracted

• • Target

    b2d8f64d585c4504658a80ef5d76d9cd42206c579d26a3e007bb74cc44b28ce9

  • Size

    288KB

  • MD5

    ca156366c023c64cb0a2074a57b8fa26

  • SHA1

    21736f34aae1c70916e9e6ca090e0f0f4b592b6b

  • SHA256

    b2d8f64d585c4504658a80ef5d76d9cd42206c579d26a3e007bb74cc44b28ce9

  • SHA512

    1588694779bafa6c59c010bf8593db765a6b54a16f4bf21f3a1f33f615d7db6cd7a9ee475f5b6f5eba4dfa096a4f74d3df0fa936f1d4bac9b02d342d2e670764

  • SSDEEP

    6144:M3FuurCMxjsXbTwPSqIZYTq6cL/4t9+mkQ7JQ:LMzPp5Tq/077J

  Score

  10^/10

  njrathackeddiscoverytrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2