Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Payload.exe.bin.exe

windows7-x64

10

Payload.exe.bin.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Payload.exe.bin.exe

  • Size

    54KB

  • Sample

    250321-119e6s1wgt

  • MD5

    ce41897c33ae593ef9d95f05d76d4668

  • SHA1

    e9917d00b854c4ee8ccc016771c790ae83bea47b

  • SHA256

    3e3d179f29cdfe42f64cd6e269abf78d291b40fea7d3c2f422810273e68176ae

  • SHA512

    8d0da6bef8ba2bf1affb7809140d608af37443628b75cc54764ba8f57d18fa7a47aa6c51f713c8b0992f2e51316a4aaf2f70ae2791eee7442aa876d5b4824747

  • SSDEEP

    768:JrNN6zR2EsltIxhLV43K2JSNeexWQG35bmaePD5Pvr2XXJdxIEpmXg:Jr8dGtShx4lGeMWQcGD2X3xIEpmXg

Score
10/10
njratvictimdiscoverypersistencetrojan

Malware Config

Extracted

Family

njrat

Version

<- NjRAT 0.7d Horror Edition ->

Botnet

Victim

C2

size-ingredients.gl.at.ply.gg:8848

Mutex

de7e1bdc0c3d602ad997d6c79062d369

Attributes
  • reg_key

    de7e1bdc0c3d602ad997d6c79062d369

  • splitter

    Y262SUCZ4UJJ

Targets

    • Target

      Payload.exe.bin.exe

    • Size

      54KB

    • MD5

      ce41897c33ae593ef9d95f05d76d4668

    • SHA1

      e9917d00b854c4ee8ccc016771c790ae83bea47b

    • SHA256

      3e3d179f29cdfe42f64cd6e269abf78d291b40fea7d3c2f422810273e68176ae

    • SHA512

      8d0da6bef8ba2bf1affb7809140d608af37443628b75cc54764ba8f57d18fa7a47aa6c51f713c8b0992f2e51316a4aaf2f70ae2791eee7442aa876d5b4824747

    • SSDEEP

      768:JrNN6zR2EsltIxhLV43K2JSNeexWQG35bmaePD5Pvr2XXJdxIEpmXg:Jr8dGtShx4lGeMWQcGD2X3xIEpmXg

    Score
    10/10
    njratdiscoverypersistencetrojan

    • Njrat family

      njrat

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks