Extracted

• • Target

    cc checker.exe

  • Size

    36KB

  • MD5

    2bde8284cee1fa0fe32a7b815e6b386a

  • SHA1

    8d9f12d9f97980171317fa2fc9ef5a42b50af82a

  • SHA256

    68925c30a00e4698111dd2f8f342568d120beb13ba2442e8129cfc79f8fd08ec

  • SHA512

    847d8739cd122c758051f1620d9212c759d6e8c03b6b9510ad9589937f82c6326c94c39b57fdd4df7780b1455f094fbcaa1769ab8c890233d9fee55deeeaef99

  • SSDEEP

    384:cfiZ9ktDWlPWPISeq90KTqZyQiiAnuPXMmWTetT2/F1qzsEQT:cfiZaDWNwJ9MyQiiCcKT

  Score

  10^/10

  njratnyan catdiscoverypersistencetrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2

• • Target

    dimap.dll

  • Size

    43KB

  • MD5

    b61675bfae56f114ae3d4f938a9d9aea

  • SHA1

    72e4d66e319ccabe8e1ef641b92724eba15dd3d6

  • SHA256

    dabe2ba75bcff8eea2f0d7d086b012ad84ff49dbf6be8371b24ce69fcacc575a

  • SHA512

    fd963378918d91aa4eb6eabadb662976f2626ae107bacaea01271b8d458f1d5e51393b116ac9c2b1c551a3fcb58c60642463e4f4ee7d67251abe5d0493a8de19

  • SSDEEP

    768:9CpUMmwufNXBkMjtwIzShvSEl4vmA+aZe83ecxhga3OU9bpb:cXPuffkctw06aEonZe8umhgCOUzb

  Score

  3^/10

  discovery
  behavioral3behavioral4

• • Target

    dimsntfy.dll

  • Size

    19KB

  • MD5

    48abb5a17b3fdaab6631224d74ddbcaf

  • SHA1

    9ed3abb97e152569c348c64b8ffdb335515afcd1

  • SHA256

    e5ff94dde6d202b332d431f5a495e5233520a87022932d05f82a307a78148007

  • SHA512

    fcb1faee109537eb8d9a78333579b88d316ec49be0698932fff8a906436f09e5d9d7d59ceb78313ef1aed2797cf2789c26912c260f7183de90228d1d1cf3fa82

  • SSDEEP

    384:VBsCe37mcOyfWrDwpn3x80oiZ1EbnAu3BS7KboWW2hXWqM:VZyegpS0Labnf8eh8

  Score

  3^/10

  discovery
  behavioral5behavioral6

• • Target

    dimsroam.dll

  • Size

    39KB

  • MD5

    d992311aee759b801ac1f5e7cdcdc678

  • SHA1

    043c7058e0c8d923912695c9f18033e8e3a174a5

  • SHA256

    6caeeb7688a113dc4b1966e16f769dfb5fed05ba3da4d9706d365c2a4cf9db3d

  • SHA512

    5e03d3c86f652c04e9f75e109a9c99c828124029d3dcc5c4cd00db867586a2a4ab0dfe508409859f849c07468610ceb74a0dad41f3a1ea25bd8486ebba7d3bc9

  • SSDEEP

    768:BlthUSa2GwWbUUT8sM5K4w8ZgjZZKqsvEy9BY/5mh/JyymKoCxKVnn:vcmGwWgUT83KH8AWNvEQy/0psQrxKV

  Score

  3^/10

  discovery
  behavioral7behavioral8