General
- Target 6C6E8B10820BA453B633894E75D47E3A.exe
- Size 337KB
- Sample250704-e41fsaap7x
- SHA256 cda2a5b57e9b78fa4e70cec57ab58efd03a85f9695f114eab548cf142492bb0b
Score
10/10
Malware Config
Targets
-
- Target 6C6E8B10820BA453B633894E75D47E3A.exe
- Size 337KB
- SHA256 cda2a5b57e9b78fa4e70cec57ab58efd03a85f9695f114eab548cf142492bb0b
Score10/10-
Njrat family
-
njRAT/Bladabindi
Widely used RAT written in .NET.
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1