Extracted

Extracted

• • Target

    PROTECTOR FREEE V2.0.exe

  • Size

    935KB

  • MD5

    67aeb6a710e8a683cf7e6d71e2a9fb08

  • SHA1

    d48b94c93c08d83271775f436ae1007a3f98cfd0

  • SHA256

    cf9d4ea03b78e714309ae2f55d416bb7bdacccac19cef39b9fc1fb7b4218dae8

  • SHA512

    26c6c4d26b0b10c35605b93fb31d635c1bc51034c93ab99b8e9f33dc3fea038060ed083e71eda7a476798b5649f35cfa2d57e1a60c959ec18c43a315efc4910f

  • SSDEEP

    24576:pdGDyyUEuzp/rnemeg9Hm8b0tHZWTkQ4:5nMQMK0XD/

  Score

  10^/10

  njratxwormتم الاختراق بواسطه احمد السيسيdiscoveryevasionpersistenceprivilege_escalationrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Modifies Windows Firewall

    evasion

  • Drops startup file

  • Executes dropped EXE

  behavioral1