Extracted

• • Target

    WindowsApp1.exe

  • Size

    477KB

  • MD5

    b5861d91a75a20e8811cefea4af1fe18

  • SHA1

    07defcf78334ffd145cdb4ff2e1163e257c4b957

  • SHA256

    5acde150ebdddc2fc69833d95691746d5c471dc08e74fe0aeb96d06670a536e7

  • SHA512

    072486eca2641fbb5efa4411a067d6c0658e71aed9a2521dd5e5321fab9ee490dfce0b11ea9c008ac054a007be5a8c2801c5a79662c30e984a756e8e7f26722a

  • SSDEEP

    12288:fqNB6ENSUO91dS039TrZgrirZXe1i709aEUpRegYyLs:+QEoUO3dS0tTxXeQ70W3

  Score

  10^/10

  njratf9t familydiscoverytrojan

  • Njrat family

    njrat

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral10behavioral2behavioral3behavioral4behavioral5behavioral6behavioral7behavioral8behavioral9