Static

static

10

HUw4K4m5.exe

windows7_x64

1

HUw4K4m5.exe

windows10_x64

1

Resubmissions

30-10-2020 10:04

201030-ayfv1db58j 10

18-10-2020 23:03

201018-4gva9edphn 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HUw4K4m5.exe

  • Size

    45KB

  • MD5

    799f88728c4848daa783bde79e4ac248

  • SHA1

    ed4c07cb0bf245cc3e82cabe18a3d3f553a6e9b4

  • SHA256

    913033893ab065b61e551399c91cdd877c134dc7dadacacbc87c3dfd798653a1

  • SHA512

    5d92d95058681daaa52bd763073481943ed404e27545c55fe93217173ead7382ce7dfb05781152bcefeb5fca2ca7219ce3af841ef8ea93edba2be89012d73cab

Score
10/10
ratasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

C2

mika201.duckdns.org:6606

mika201.duckdns.org:7707

mika201.duckdns.org:8808
Mutex

tela

Attributes
  • aes_key

    hwNRw6QKjdqU0otngNH6PAXwaqIaKdkO

  • anti_detection

    false

  • autorun

    false

  • bdos

    false

  • delay

    tela

  • host

    mika201.duckdns.org

  • hwid

    3

  • install_file

  • install_folder

    %AppData%

  • mutex

    tela

  • pastebin_config

    null

  • port

    6606,7707,8808

  • version

    0.5.7B

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat

Files

  • HUw4K4m5.exe
    .exe windows x86