Analysis
-
max time kernel
30s -
max time network
20s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
17-01-2025 13:13
General
-
Target
TEST.exe
-
Size
1003KB
-
MD5
1feff7edaaad2e6ea0eba2c62f819584
-
SHA1
ec7be71cd23a500cd8e56b21192e7eafa6c91eb7
-
SHA256
fd8ee2d66b2a66a7528b8ed3d76d9c08a036618541c4c896e37e331566f44788
-
SHA512
c3f8fc979fee2e95ee17f6612f93f0a64e04c784ba776e39f6f959b74840f4f4b99892206c40d477084fa68aaaa0e748b79f6952c3838dcddc8f268a14818b1f
-
SSDEEP
12288:wA5lqga6rBEEKAeWgVmfedIASjLrj3xVvPTrPTrQ2irclmKJMElmMSSMsvo:wwaPEKRGzGc5Dk1fwo
Score
10/10
Malware Config
Signatures
-
Njrat family
-
njRAT/Bladabindi
Widely used RAT written in .NET.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\TEST.exe"C:\Users\Admin\AppData\Local\Temp\TEST.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
1024KB
-
Filesize
624KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
7.7MB
-
Filesize
344KB
-
Filesize
408KB
-
Filesize
7.7MB