Extracted

• • Target

    Nigga.exe

  • Size

    55KB

  • MD5

    7a1624af489962ed1c60426a536e250c

  • SHA1

    3ae27946c2dccb5ca0014d3b367dfb0b5f6bebc9

  • SHA256

    441be6f69dd6bdfafdf7fa4596ef37ac3a8bf6cce2b9b9154c5f2f39c71e3d97

  • SHA512

    a159818951c59d9eedccc70cc02dd5d65c8da7b0eebb5300d957614af8e71e64821bfcff3aa888a617f4cfccef4621c1534e70cd840753e04b733e7c71c652ca

  • SSDEEP

    1536:B+oADn8fLNG/SbrKDD3wsNMDvXExI3pmjm:/ADncsqbeDD3wsNMDvXExI3pm

  Score

  10^/10

  njratbootkitdiscoverypersistencetrojan

  • Njrat family

    njrat

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Writes to the Master Boot Record (MBR)

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  behavioral1behavioral2