Overview

overview

10

Static

static

10

b278a296f1...0N.exe

windows7-x64

10

b278a296f1...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b278a296f194fd5a2e7b6bfb8a1870f0N

  • Size

    337KB

  • Sample

    240910-eqqdnawdnn

  • MD5

    b278a296f194fd5a2e7b6bfb8a1870f0

  • SHA1

    11361a52fc6ddca57f53f3f2660e0590cc6c200f

  • SHA256

    89a9a13f51095fd381f116d5a70a8c2f2302db6bc562292f4e92588671c6938e

  • SHA512

    9c707e024d0f5c3a06bdaf004cdebd8fcea6d4d8d38313e5acd1ab0952fa49fd852c4ae72042c16c7137d113ec826f1ac8b435e81520c7e8c55683607fe1c679

  • SSDEEP

    3072:/MLyv8L6pCVYfbK4gYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:/M2vFe41+fIyG5jZkCwi8r

Score
10/10
njratdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      b278a296f194fd5a2e7b6bfb8a1870f0N

    • Size

      337KB

    • MD5

      b278a296f194fd5a2e7b6bfb8a1870f0

    • SHA1

      11361a52fc6ddca57f53f3f2660e0590cc6c200f

    • SHA256

      89a9a13f51095fd381f116d5a70a8c2f2302db6bc562292f4e92588671c6938e

    • SHA512

      9c707e024d0f5c3a06bdaf004cdebd8fcea6d4d8d38313e5acd1ab0952fa49fd852c4ae72042c16c7137d113ec826f1ac8b435e81520c7e8c55683607fe1c679

    • SSDEEP

      3072:/MLyv8L6pCVYfbK4gYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:/M2vFe41+fIyG5jZkCwi8r

    Score
    10/10
    njratdiscoverypersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks