Overview

overview

10

Static

static

10

6596632cfd...3N.exe

windows7-x64

10

6596632cfd...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6596632cfd51779343afcd7703aa57c16a9fe7ba685aa95b0c096f2de30b95d3N

  • Size

    42KB

  • Sample

    240919-zbcjgazapp

  • MD5

    0b4a8cccee17381aecd634b6414f9c40

  • SHA1

    82bae64a12475b580150503217c7c9699978be61

  • SHA256

    6596632cfd51779343afcd7703aa57c16a9fe7ba685aa95b0c096f2de30b95d3

  • SHA512

    4d50d154604aaeb268086dae6de4296ecebdbaca217a43e8abe6b6cb72efc09f7c35b7c369eae47ac18297d1a7185868d2341d2bf4bc5d83cae843d5aefde11e

  • SSDEEP

    384:pZe69WNUst+3gUy6vH9GOmECbdJ0jaCnKs1jUNNNCP33hYCtVKwJR7AMu0reT0pe:rIwQh6f99sbEaCKuUVupVZG+L

Score
10/10
njratdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      6596632cfd51779343afcd7703aa57c16a9fe7ba685aa95b0c096f2de30b95d3N

    • Size

      42KB

    • MD5

      0b4a8cccee17381aecd634b6414f9c40

    • SHA1

      82bae64a12475b580150503217c7c9699978be61

    • SHA256

      6596632cfd51779343afcd7703aa57c16a9fe7ba685aa95b0c096f2de30b95d3

    • SHA512

      4d50d154604aaeb268086dae6de4296ecebdbaca217a43e8abe6b6cb72efc09f7c35b7c369eae47ac18297d1a7185868d2341d2bf4bc5d83cae843d5aefde11e

    • SSDEEP

      384:pZe69WNUst+3gUy6vH9GOmECbdJ0jaCnKs1jUNNNCP33hYCtVKwJR7AMu0reT0pe:rIwQh6f99sbEaCKuUVupVZG+L

    Score
    10/10
    njratdiscoverypersistencetrojan

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks