Extracted

• • Target

    1cc21e3bbfc910ff2ceb8e63641582bdcca3e479029aa425c55aa346830c6c72.bin

  • Size

    36KB

  • MD5

    4f6d5d0ba1aa54880f1bcce5ed4858a4

  • SHA1

    06d7f2150ebe20a6c3a0e65a46459b5fe2e9ceb2

  • SHA256

    1cc21e3bbfc910ff2ceb8e63641582bdcca3e479029aa425c55aa346830c6c72

  • SHA512

    fa78f6a16ded41d10bf5a09bfc849452b21e9f0b9d9fe29e9162811aae5912264bf117f30cf2dfd443fa073b925e999ba484ecb6f38b7d8a0f05d839ee40792f

  Score

  10^/10

  netdookaevasionloaderpersistencerat

  • NetDooka

    NetDooka is a malware framework distributed by way of a pay-per-install and written in C#.

    loaderratnetdooka

  • Creates new service(s)

    persistence

  • Executes dropped EXE

  • Stops running service(s)

    evasion

  • Checks for any installed AV software in registry

  behavioral1behavioral2