Overview

overview

10

Static

static

10

6676b08ba4...83.exe

windows7-x64

10

6676b08ba4...83.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6676b08ba453f4867119c0c282b29ba87829b982aad2840122c3550888cb8683

  • Size

    337KB

  • Sample

    240907-2c418a1drb

  • MD5

    6af0ac30af4a4500deba158720fafbd5

  • SHA1

    4aad182ffe54bae5a2aadfb4917c740b23030c41

  • SHA256

    6676b08ba453f4867119c0c282b29ba87829b982aad2840122c3550888cb8683

  • SHA512

    05bf1c8d80ecad7f3508e13106b9e2fd183a021a426b405c0c7e41523a7a6d771386d703d31ff2c26e3f8cc9dbab0de57d01bc2611c19a35c61c635659cc14e9

  • SSDEEP

    3072:ct/S7swmVTi0uAUngYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:6wmYAUn1+fIyG5jZkCwi8r

Score
10/10
njratdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      6676b08ba453f4867119c0c282b29ba87829b982aad2840122c3550888cb8683

    • Size

      337KB

    • MD5

      6af0ac30af4a4500deba158720fafbd5

    • SHA1

      4aad182ffe54bae5a2aadfb4917c740b23030c41

    • SHA256

      6676b08ba453f4867119c0c282b29ba87829b982aad2840122c3550888cb8683

    • SHA512

      05bf1c8d80ecad7f3508e13106b9e2fd183a021a426b405c0c7e41523a7a6d771386d703d31ff2c26e3f8cc9dbab0de57d01bc2611c19a35c61c635659cc14e9

    • SSDEEP

      3072:ct/S7swmVTi0uAUngYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:6wmYAUn1+fIyG5jZkCwi8r

    Score
    10/10
    njratdiscoverypersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks