Overview

overview

10

Static

static

10

b394fcd935...0N.exe

windows7-x64

10

b394fcd935...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b394fcd935ec6c2d143914987a0429a0N

  • Size

    337KB

  • Sample

    240911-knglma1fpn

  • MD5

    b394fcd935ec6c2d143914987a0429a0

  • SHA1

    8f74c1f84a9124159e4cd3d14aa50749b3dbb8bc

  • SHA256

    67307b83cec26a699a7f7247c5fbeafdaab8d41dca976bd0a9af061e08e78744

  • SHA512

    53f10ccf7baa321c9478655324952b2104f0955244e748c9f66fc3621813c42e4a9e68fd1f23e8d96334c89b49e3d69f2a223a9b9dff4b37104aad516ec4cc33

  • SSDEEP

    3072:JNWs+g2l1cIkBgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:Jst1lkB1+fIyG5jZkCwi8r

Score
10/10
njratdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      b394fcd935ec6c2d143914987a0429a0N

    • Size

      337KB

    • MD5

      b394fcd935ec6c2d143914987a0429a0

    • SHA1

      8f74c1f84a9124159e4cd3d14aa50749b3dbb8bc

    • SHA256

      67307b83cec26a699a7f7247c5fbeafdaab8d41dca976bd0a9af061e08e78744

    • SHA512

      53f10ccf7baa321c9478655324952b2104f0955244e748c9f66fc3621813c42e4a9e68fd1f23e8d96334c89b49e3d69f2a223a9b9dff4b37104aad516ec4cc33

    • SSDEEP

      3072:JNWs+g2l1cIkBgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:Jst1lkB1+fIyG5jZkCwi8r

    Score
    10/10
    njratdiscoverypersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks