Extracted

• • Target

    SharkHack.exe

  • Size

    3.9MB

  • MD5

    1132637cde57bdbd23fd05694713fb94

  • SHA1

    1625fe2acadbc9c8a400c69e1ca7e8afd97b56eb

  • SHA256

    5cdc56dfe73c53516cb619f44147b0f8535ab68575a8071008ad59599d5c1cb6

  • SHA512

    65bd5fdb631b33964038b972d71a4d17fa8290b3a2052fd88097e66e7a3af6fa0a7f8e1cde0ebe5867c6b5e8e923f1f6143f6f9d2dc4a0770fb785238d1f130f

  • SSDEEP

    49152:SFnCO88whwjbAlR/6QhDEvebZVLRbjgQjzK5ppnrLn6XBSOvdsW:9hTbDzhfgQSp9LSBnvdsW

  Score

  10^/10

  njrathackeddiscoverypersistencetrojan

  • Njrat family

    njrat

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2