Analysis
-
max time kernel
80s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
01-01-2025 16:36
General
-
Target
97a796eb1a756bbb3b7d491790a65bbfc8e03c7b5ef2ebf4c50d69da74f14234.exe
-
Size
38KB
-
MD5
08c7f615a83bebbe9bc12d4cb3aeb230
-
SHA1
7cf2eb4540be87a0ff0df0de9938cd9014c8de9e
-
SHA256
97a796eb1a756bbb3b7d491790a65bbfc8e03c7b5ef2ebf4c50d69da74f14234
-
SHA512
ad4dd756224d99dc54527c01866954131bb482798850070bb501a1b6a4ca0988c251ea9ae364957603df468643b63787cfeb061de10621c38352adacf74523c1
-
SSDEEP
768:W7fuHRm9lgWRWkbfcZQpEkU9OfzhBHNZHVb5:qKRm0WfbfcOuHOfzf55
Score
10/10
Malware Config
Signatures
-
Njrat family
-
njRAT/Bladabindi
Widely used RAT written in .NET.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 5 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\97a796eb1a756bbb3b7d491790a65bbfc8e03c7b5ef2ebf4c50d69da74f14234.exe"C:\Users\Admin\AppData\Local\Temp\97a796eb1a756bbb3b7d491790a65bbfc8e03c7b5ef2ebf4c50d69da74f14234.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
48KB
-
Filesize
8KB
-
Filesize
10.8MB