Analysis
-
max time kernel
149s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04-10-2024 21:03
General
-
Target
Payload1.exe
-
Size
55KB
-
MD5
afb28648c98fea9152e393ea1b471b7d
-
SHA1
050afab624a01d0c0cff85f6615e994806fe5267
-
SHA256
27899b96d89edab96a855baf1d9661fc970b8806720220273fc7593bf4b602e8
-
SHA512
a4ca8aafbf257d6a0c925615f0f17c57b3a7f0e539308d38bdb5cd1865804404854abc6013069eba538e8862d8ca64b576645d970657ccdb4117f5e3189e8fd8
-
SSDEEP
1536:2Btu8DnN8N1+S1Cl/BODtwsNMDxXExI3pmqm:l8DnNGcXODtwsNMDxXExI3pm
Score
10/10
Malware Config
Signatures
-
njRAT/Bladabindi
Widely used RAT written in .NET.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 37 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Payload1.exe"C:\Users\Admin\AppData\Local\Temp\Payload1.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB