Extracted

• • Target

    0887973431205690d2ddf9623e60d433_JaffaCakes118

  • Size

    475KB

  • MD5

    0887973431205690d2ddf9623e60d433

  • SHA1

    021f27669a96e759555669cd33bbd7804d40dd97

  • SHA256

    954b6db18e2700e7365622598107b9641c0aebc5c3273e9d57d6f09066938e1c

  • SHA512

    3056f4e3816d8f03d3f7333beb5554df0e0fe1d1c46403a3d16ade79a0c5fb22880533a0eedbb693ec18ac6b72068973aa380e0a8bc6eb573ec8af7e2f7b79ef

  • SSDEEP

    6144:+XT0Bg+He5yOkgYkiT2XvvN9xIyDONG28WAC/KoDngLV6yuY1HeO:e0a++Z11DND3+GdO/JDnGVZu0+O

  Score

  10^/10

  njratnew2021-aug-s1discoveryevasionpersistenceprivilege_escalationtrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Modifies Windows Firewall

    evasion

  • Suspicious use of SetThreadContext

  behavioral1behavioral2