General

  • Target

    hackbox-roblox_GM_archive.exe

  • Size

    3.8MB

  • MD5

    e3e9ac59877cedc1fdfefe9509ae614f

  • SHA1

    d78663d0677635698c55c8bce975f91d1f558573

  • SHA256

    caf068000fca29647092189feca9c386e18014f26a43c4eeb556967b12c4d668

  • SHA512

    ccf216b4142b6a4eebb39c6130ce9281e493768a3f0a23e76907b681a675c68ddc46755026a407f1cd3b2e3d37c52ce0afc9b59fd373682481b4b60e1c7a9c1f

  • SSDEEP

    768:UY+sNKqNHnSdRpcnu/lMJDhxlhzndlbb5Uo1Mj9yagS0zqJzv5NUOnM0W2+cYfbJ:N+sdV+RWu/lM5Dn5R29yIJDorfThgz

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

pidoras

C2

89.47.1.10:6518

Mutex

ecd6362c437ca109e38f01e32884f684

Attributes
  • reg_key

    ecd6362c437ca109e38f01e32884f684

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • hackbox-roblox_GM_archive.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections