Extracted

• • Target

    NgDBXb2Ifxxw.exe

  • Size

    508KB

  • MD5

    f644d38b419969bb1042d123796f8740

  • SHA1

    ebbf86ed2cb7ef875f3a19950a39a22d99651ca9

  • SHA256

    940bed21e0749f10a7f5cc39535a43f6e124d8b54bdfe84ff96bf6c41c1b7de4

  • SHA512

    d2869301e5807f0a1eca4361e26f72cd80fed0d03c6c4faf3cd01f830d09039839cfca235c3f59637d071051175ddfa68c57d5306f88d80df6ce7f6c158a8520

  • SSDEEP

    12288:0h1Lk70TnvjckQ/nwcdstBhJN3igQOy5bZaZjIzRXGxH+iDfupIj:Qk70TrcF/wcOn3i3Oy5l6jINWciD2pIj

  Score

  10^/10

  njratsoftdiscoverytrojan

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2