General

  • Target

    roblox files.exe

  • Size

    93KB

  • MD5

    05f787e4e30668863bc12b567d6af663

  • SHA1

    0fb11050e6c1b11bc23692a35c873bdbd97fd877

  • SHA256

    59240ece35d4e3be8dcc7bc0090085634899523f8e8f2b7834296263e0ed0165

  • SHA512

    5d6e558520433e48405b71934654149ed3c74ba296049121938ed9ed2e8dd58a553897c4812f2a492a8bbaeb76bf3edf9039551bc4fa97375b9bcfa4db08e804

  • SSDEEP

    1536:kdkUZFRPmGvMzLivOnjEwzGi1dDuDogS:kd/RPmGvMzuvOMi1d4R

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

127.0.0.1:522

Mutex

77a87ecc7b3085584d4e829ee5a0b3ab

Attributes
  • reg_key

    77a87ecc7b3085584d4e829ee5a0b3ab

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • roblox files.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections