Extracted

• • Target

    SholirPrivate.exe

  • Size

    25KB

  • MD5

    5e8facdac73af8e6c2032a979af187c5

  • SHA1

    dd5f109dc09df7490726a9764f929c27018d8975

  • SHA256

    3ac6cecc2e601cb60c13478eba7e46bb29cb78da5e9801c7f38be8588e31ffc9

  • SHA512

    61c0e5c57618926cd021f6e31464d5f4cb49cfff93c5cc5e8842eca907f295d57fb80e812128ca1aa346902a5458de98a7dfa943cd745043f15017f0873eb1ce

  • SSDEEP

    768:svpnCavdFPJ3Wh0rXjTwFu9wq1U/Xdutnz5QZCL:QBFPJSsjzRuFu9lQQ

  Score

  10^/10

  njrathackedtrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1