Extracted

• • Target

    6650a384367acf072fc798cfc0c40e74.exe

  • Size

    512KB

  • MD5

    6650a384367acf072fc798cfc0c40e74

  • SHA1

    aa89e965c2b5904d8c970ff21e4159cd63bcaf99

  • SHA256

    f4bc8c2bcd243d67ed8cd5442dcc07460790dbcfa0d04a245f9333b900f7c022

  • SHA512

    658dde54c128e0e4e8ff33c4e2deebed1251c0cc95920026023a9a0bb0f895ba877aa56ec58f0db10a9e4878a146a9d0c11ea92d924829fdbbefaa53dc52bee6

  • SSDEEP

    12288:RYIsJ6miMYnyTF4Pb47oDYIWtA2VpLIqAY:YPiMYnymj47oDYIWtfpL

  Score

  10^/10

  njrathackedpersistencetrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Drops startup file

  • Adds Run key to start application

    persistence
  behavioral1behavioral2