Extracted

• • Target

    07689a62c1cbaa328360ce2fcb6697052fc6aae5de85a346b0d299b0fd8d2ce2.exe

  • Size

    543KB

  • MD5

    85aafc56b203960fbe35e652e1974d4d

  • SHA1

    dee42ace25a5207ea321f21581cfeabf5d5ab36a

  • SHA256

    07689a62c1cbaa328360ce2fcb6697052fc6aae5de85a346b0d299b0fd8d2ce2

  • SHA512

    c39c7742dd8448d52d89126debc06527b0e297b7bfc269647644652a7e50bd31b73a2296384007842b742d203cbb1d0106fd92a546f5a99cdbf46bd9f8330165

  • SSDEEP

    12288:2iMmalyw9qfcaF52WgAIsAxOfqV42Rqol0M0pMsRNQSJGmENwMpVd:nMigAm3lTaQd

  Score

  10^/10

  njratvictimdiscoverypersistencetrojan

  • Modifies WinLogon for persistence

    persistence

  • Njrat family

    njrat

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Drops startup file

  • Adds Run key to start application

    persistence
  behavioral1behavioral2