Overview

overview

10

Static

static

10

9da6b89af2...0N.exe

windows7-x64

10

9da6b89af2...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9da6b89af2c13ff64aaf0f7034c47440N

  • Size

    337KB

  • Sample

    240911-xjpgwsxdke

  • MD5

    9da6b89af2c13ff64aaf0f7034c47440

  • SHA1

    05f77bdb03f580472d762bbf287b64fea3376258

  • SHA256

    e6401eeaf83344286830dbdce9960e08339a2d32b6ae3c6c9b8cd92ad12a7b7f

  • SHA512

    ad42e7d5d15d0a70c953b8669701a5a054884d37cd388f9ac8c9cbba3021ca8421e7b2e49e936c62b4faf5dd2b28c5e220a3ff447fa6b819aa2ad73ff01519d7

  • SSDEEP

    3072:KYhXnWuMgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:KEWuM1+fIyG5jZkCwi8r

Score
10/10
njratdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      9da6b89af2c13ff64aaf0f7034c47440N

    • Size

      337KB

    • MD5

      9da6b89af2c13ff64aaf0f7034c47440

    • SHA1

      05f77bdb03f580472d762bbf287b64fea3376258

    • SHA256

      e6401eeaf83344286830dbdce9960e08339a2d32b6ae3c6c9b8cd92ad12a7b7f

    • SHA512

      ad42e7d5d15d0a70c953b8669701a5a054884d37cd388f9ac8c9cbba3021ca8421e7b2e49e936c62b4faf5dd2b28c5e220a3ff447fa6b819aa2ad73ff01519d7

    • SSDEEP

      3072:KYhXnWuMgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:KEWuM1+fIyG5jZkCwi8r

    Score
    10/10
    njratdiscoverypersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks