Overview

overview

10

Static

static

10

14e91ff17d...0N.exe

windows7-x64

10

14e91ff17d...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14e91ff17d8c5b1d5ba60e65e84771a0N

  • Size

    337KB

  • Sample

    240913-1l6qqszhpj

  • MD5

    14e91ff17d8c5b1d5ba60e65e84771a0

  • SHA1

    cda5e425854b0fe81ef3084cfaa9f3c89ee2f2f7

  • SHA256

    6670e1b182302dcab351d3dd96543a14bb6f9242c3aa3e9ccb54a157acf953ae

  • SHA512

    66ec4ca8fc896d74cb860f3ca113c6bd299e62edd221abdddc8418fb1e857a975c3dea6b0da9f388a48263f5373cee037f3d279b95613b730f956f1f34aa86ae

  • SSDEEP

    3072:jlUnz3z1eCRgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:Gz3z1eCR1+fIyG5jZkCwi8r

Score
10/10
njratdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      14e91ff17d8c5b1d5ba60e65e84771a0N

    • Size

      337KB

    • MD5

      14e91ff17d8c5b1d5ba60e65e84771a0

    • SHA1

      cda5e425854b0fe81ef3084cfaa9f3c89ee2f2f7

    • SHA256

      6670e1b182302dcab351d3dd96543a14bb6f9242c3aa3e9ccb54a157acf953ae

    • SHA512

      66ec4ca8fc896d74cb860f3ca113c6bd299e62edd221abdddc8418fb1e857a975c3dea6b0da9f388a48263f5373cee037f3d279b95613b730f956f1f34aa86ae

    • SSDEEP

      3072:jlUnz3z1eCRgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:Gz3z1eCR1+fIyG5jZkCwi8r

    Score
    10/10
    njratdiscoverypersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks