Extracted

• • Target

    91791f8c459f32dc9bf6ec9f7ee157e322b252bc74b1142705dcc74fe8eced7e

  • Size

    62KB

  • MD5

    e538190af9ed2ee602d3cbbe25fd1d78

  • SHA1

    9649f68d1de493b0f17d93b33c2e6bd0ff149e1e

  • SHA256

    91791f8c459f32dc9bf6ec9f7ee157e322b252bc74b1142705dcc74fe8eced7e

  • SHA512

    99b29ef2c068da8d0d50927463257ae1e90b30dab4114af3c5300084b2a6bbdc1d8b67bc9e3cd6d8bd3320c56bb255f7de3a9f60363f2bc0935603e8929eb99b

  • SSDEEP

    768:eUcljbdbaduiSpAmHGHuGFOChjPpcPO2hbdtVWfCoJAvVfjgK+v1Pshc5HFe0jwJ:ABdb1iMASmICZptCX5jRUGgjjvI10w

  Score

  10^/10

  netdookaloaderpersistencerat

  • NetDooka

    NetDooka is a malware framework distributed by way of a pay-per-install and written in C#.

    loaderratnetdooka

  • Creates new service(s)

    persistence

  • Executes dropped EXE

  • Checks for any installed AV software in registry

  behavioral1behavioral2