Extracted

• • Target

    190a48f7e92629dc4105a4702662eb80N

  • Size

    552KB

  • MD5

    190a48f7e92629dc4105a4702662eb80

  • SHA1

    bc6387114d8181c5d810262ce4b3aa96b52fb016

  • SHA256

    0bb972809d4be266bdffd3692b34ba0bf27e01a000b935917f40ef19bf866525

  • SHA512

    dc8633343886a4b730e873e60c8990f24c5bfcbc0e019d1135c852d90be02b644f7364aa9cc64e4a53ceb0d3da338cfeb4a6b49cddbf56b58f5269293781f648

  • SSDEEP

    12288:R32kYn9YFZBsws0rwfQpP9p/yFUk6l6X3cWCauQWannR8fq:RGk69IS0rw4pP9p416QMaBnRCq

  Score

  10^/10

  njratoctdiscoverytrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2