General
- Target 2652-369-0x0000000000400000-0x000000000040C000-memory.dmp
- Size 48KB
- Sample240806-kt9vcsveml
- SHA256 efdfa00f5944f6e7c9a01726df1313f227587cfb4b2b9bb79f894eb030bd9121
- MD5 12648743e5be703ba718e4b5d94ee885
- SHA1 2c3619604793342fad88e4e83fff4650a7ed65e2
- SHA512 55fcbacade868cce76a583bcc6a67bfa2487e964b15bb81b18194f86a237d3fcbd705b0e796ecd1d81ff3152d21dd102d3227117af54569167576377bd4200a2
- SSDEEP 384:Yc6ze6e1PAhJVzC3tC1im/BsTx46PgZ0rap9HBmRvR6JZlbw8hqIusZzZzI:Me9EJLN/yRpcnuj
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
2652-369-0x0000000000400000-0x000000000040C000-memory.exe
Resource
win7-20240704-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2652-369-0x0000000000400000-0x000000000040C000-memory.exe
Resource
win10v2004-20240802-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
0.7d
Botnet
-
neuf
C2
-
doddyfire.linkpc.net:10000
Mutex
-
e1a87040f2026369a233f9ae76301b7b
Attributes
-
reg_key
e1a87040f2026369a233f9ae76301b7b
-
splitter
|'|'|
Targets
-
- Target 2652-369-0x0000000000400000-0x000000000040C000-memory.dmp
- Size 48KB
- SHA256 efdfa00f5944f6e7c9a01726df1313f227587cfb4b2b9bb79f894eb030bd9121
- MD5 12648743e5be703ba718e4b5d94ee885
- SHA1 2c3619604793342fad88e4e83fff4650a7ed65e2
- SHA512 55fcbacade868cce76a583bcc6a67bfa2487e964b15bb81b18194f86a237d3fcbd705b0e796ecd1d81ff3152d21dd102d3227117af54569167576377bd4200a2
- SSDEEP 384:Yc6ze6e1PAhJVzC3tC1im/BsTx46PgZ0rap9HBmRvR6JZlbw8hqIusZzZzI:Me9EJLN/yRpcnuj
- MD5 SHA1 SHA512 SSDEEP
Score1/10