Overview

overview

10

Static

static

10

98cae67f5c...4f.exe

windows7-x64

7

98cae67f5c...4f.exe

windows10-2004-x64

7

98cfbc262e...bc.exe

windows7-x64

10

98cfbc262e...bc.exe

windows10-2004-x64

10

98d8bede74...ed.exe

windows7-x64

10

98d8bede74...ed.exe

windows10-2004-x64

10

9905bf91d0...cd.exe

windows7-x64

3

9905bf91d0...cd.exe

windows10-2004-x64

3

99171e268b...08.exe

windows7-x64

10

99171e268b...08.exe

windows10-2004-x64

10

991fdf0c20...cd.exe

windows7-x64

10

991fdf0c20...cd.exe

windows10-2004-x64

10

9921900649...5f.exe

windows7-x64

10

9921900649...5f.exe

windows10-2004-x64

10

9941d8f932...2a.exe

windows7-x64

10

9941d8f932...2a.exe

windows10-2004-x64

10

997e8d89ff...b8.exe

windows7-x64

3

997e8d89ff...b8.exe

windows10-2004-x64

10

998566d8ea...73.exe

windows7-x64

10

998566d8ea...73.exe

windows10-2004-x64

10

99bf888072...4b.exe

windows7-x64

10

99bf888072...4b.exe

windows10-2004-x64

10

99f05fe5d0...13.exe

windows7-x64

7

99f05fe5d0...13.exe

windows10-2004-x64

10

9a11a17452...66.exe

windows7-x64

10

9a11a17452...66.exe

windows10-2004-x64

8

9a26a56f56...c3.exe

windows7-x64

10

9a26a56f56...c3.exe

windows10-2004-x64

10

9a292ed0f5...7a.exe

windows7-x64

10

9a292ed0f5...7a.exe

windows10-2004-x64

10

9a3fe6a67d...4c.exe

windows7-x64

10

9a3fe6a67d...4c.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    127s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/03/2025, 06:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9941d8f932e596ae65f70b976ecc4f6620bf5ffc6928800633ac9443c0e94c2a.exe

  • Size

    198KB

  • MD5

    ba3ff80611dbb0fad8d1f1985f14d021

  • SHA1

    6ef5df6ce43a740a71a806542c593836d1a89cbf

  • SHA256

    9941d8f932e596ae65f70b976ecc4f6620bf5ffc6928800633ac9443c0e94c2a

  • SHA512

    4c0c84af80f0544aa6fc1a9f21e20461149162751736bace09e4620b20be780b392f512c5b1f157a325b48e3a8ae9a46334f2eeae4155c50692076870bc7b809

  • SSDEEP

    3072:/LLR0bredfUlNX8NFApCFROtLZv7kV6MS9TEjc4bHyN6+bKNhef2aMJ9:/L+uPA4ALZvau8bHwKvI2a

Score
10/10
njratdiscoverytrojan

Malware Config

Signatures

  • Njrat family
    njrat
  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 31 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9941d8f932e596ae65f70b976ecc4f6620bf5ffc6928800633ac9443c0e94c2a.exe
    "C:\Users\Admin\AppData\Local\Temp\9941d8f932e596ae65f70b976ecc4f6620bf5ffc6928800633ac9443c0e94c2a.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2340

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2340-0-0x00000000752A2000-0x00000000752A3000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2340-1-0x00000000752A0000-0x0000000075851000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/2340-2-0x00000000752A0000-0x0000000075851000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/2340-3-0x00000000752A2000-0x00000000752A3000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2340-4-0x00000000752A0000-0x0000000075851000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/2340-5-0x00000000752A0000-0x0000000075851000-memory.dmp

    Filesize

    5.7MB

    Download