Overview

overview

10

Static

static

10

f036e35e23...0N.exe

windows7-x64

10

f036e35e23...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f036e35e230f8ead91b4ffc5bc679f90N.exe

  • Size

    337KB

  • Sample

    240909-s1mx6swalk

  • MD5

    f036e35e230f8ead91b4ffc5bc679f90

  • SHA1

    d93a7c1460dda7e6826860dbabba47067c198145

  • SHA256

    5ca214faab947efa9cfe82ec62ea6f9cd3a4df6378b767a9b74cd6435a32ea6c

  • SHA512

    37655e1dd1318a142a39daf9bd7f27509b6364019c00c1dbe3968d8d1a88302b0a6f2988e5bc1055f234d45e6a93613fe2efba2dd50a5dc6f42a2a2a7051140d

  • SSDEEP

    3072:/x6iP02OpCk8gYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:/IiM9L81+fIyG5jZkCwi8r

Score
10/10
njratdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      f036e35e230f8ead91b4ffc5bc679f90N.exe

    • Size

      337KB

    • MD5

      f036e35e230f8ead91b4ffc5bc679f90

    • SHA1

      d93a7c1460dda7e6826860dbabba47067c198145

    • SHA256

      5ca214faab947efa9cfe82ec62ea6f9cd3a4df6378b767a9b74cd6435a32ea6c

    • SHA512

      37655e1dd1318a142a39daf9bd7f27509b6364019c00c1dbe3968d8d1a88302b0a6f2988e5bc1055f234d45e6a93613fe2efba2dd50a5dc6f42a2a2a7051140d

    • SSDEEP

      3072:/x6iP02OpCk8gYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:/IiM9L81+fIyG5jZkCwi8r

    Score
    10/10
    njratdiscoverypersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks