Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
24/03/2025, 14:47
General
-
Target
.exe
-
Size
54KB
-
MD5
c765dd8a420fa5c8ded87227cc0bbe44
-
SHA1
85a77938cb84dcf5e446b1eb6dc274b2709e7f92
-
SHA256
4944cae1682a2298a6dab4fd675158632bee27feee6b48d753719755522937c4
-
SHA512
a76e57713e938c8ebf1b816716327401d5e5f83895bf8511ab592b248ff951548d012294298842537a67becc15d727e9fbd164b9f155f228a269b23869e85e2e
-
SSDEEP
768:iNoLg652Eslt/aNxND3O4JSNjxWQG35bmaePD5PvT2XXJdxIEpmgg:iNSVGtiNjDTGdWQcGDCX3xIEpmgg
Score
10/10
Malware Config
Signatures
-
Njrat family
-
njRAT/Bladabindi
Widely used RAT written in .NET.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 37 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\.exe"C:\Users\Admin\AppData\Local\Temp\.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB