Extracted

• • Target

    https://e.pcloud.link/publink/show?code=XZjnaPZ3z836WvLHFYjz6QYckVa24NrS6GV

  Score

  10^/10

  njrathackedcredential_accessdefense_evasiondiscoverypersistencestealertrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1