Overview

overview

10

Static

static

10

EhXUMhhD.exe

windows7_x64

10

EhXUMhhD.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    EhXUMhhD.exe

  • Size

    45KB

  • MD5

    b9121bf875ef630683f14e1fe20b6bc2

  • SHA1

    4c07b658f5c366fb54bbcb2a8b580d972e8f1f0d

  • SHA256

    568d8b063f549298e638c5c39c5b12a2e379b402224b689cab5504d29bef8e35

  • SHA512

    7affaac4b72cbc542880c764d8c6c99f2b450c53d830583976d42f1f277dd99010bcb8601bf32ffcf27ec8cc884111df891b41b33126c13c853b8de41260e97a

Score
10/10
ratasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

C2

kexa600200.ddns.net:1604

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • aes_key

    SRRgYpO0zl93rAAOimnuhvN7bW9xQ0vI

  • anti_detection

    false

  • autorun

    false

  • bdos

    false

  • delay

    Default

  • host

    kexa600200.ddns.net

  • hwid

    3

  • install_file

  • install_folder

    %AppData%

  • mutex

    AsyncMutex_6SI8OkPnk

  • pastebin_config

    null

  • port

    1604

  • version

    0.5.7B

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat

Files

  • EhXUMhhD.exe
    .exe windows x86