General

  • Target

    748cee9632f886ee76ea77a66dc2ddca497e508ef17105848ae161bc72d9a438

  • Size

    212KB

  • MD5

    a14a7135e6f0038de1f36336264f556e

  • SHA1

    fd16c626eb7af411f2e2ca4ffefcad628a31abd2

  • SHA256

    748cee9632f886ee76ea77a66dc2ddca497e508ef17105848ae161bc72d9a438

  • SHA512

    9e77e03373631a622b0df39a2d144e8bb5cde27b7e8e9e81ddb26b000e10993ec50c6d5cb30cfde3bfe56b2efad5e0e014881aeb8561a71f42bf0afb8bb78bc7

  • SSDEEP

    6144:Ceg6S1BfJWFBtL/2XWOXQ8xk3GyddMeqV:WBxWFBtLeX1IfAV

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

robinhood122333.no-ip.biz:5552

Mutex

ae05d203144696f66006208e801d7263

Attributes
  • reg_key

    ae05d203144696f66006208e801d7263

  • splitter

    |'|'|

Signatures

Files

  • 748cee9632f886ee76ea77a66dc2ddca497e508ef17105848ae161bc72d9a438
    .rar
  • Happy-Birthday-Quotes-for-Cards.jpg
    .jpg
  • obox.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • obox.ini