Extracted

• • Target

    hhhh77.exe

  • Size

    8.3MB

  • MD5

    9214afbf5645990e16a4935d4b66a2e1

  • SHA1

    ff88a1ba0e19d31f9ffbf0c5844709654d33a441

  • SHA256

    430365bd280fcc6e3a8f2912dad54c397e0c6dabd4dbf505cd95e53bdc8dc36a

  • SHA512

    21b8c7b9d28ddd745fa283cf449af7e248b7bde410217fa625a0654381247ad7012983a26b8f84d13cf610bb28180bd6e497a75368df637609d69f8f58e4ec31

  • SSDEEP

    196608:IIcwMCzK6VFMW/sd0PVVlMyELNCMgZsHcSCD:JNmyFW+Px0NIycf

  Score

  10^/10

  njrathackeddiscoverytrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2