asyncrat | a25384a50bece6cefbc853d787d65ab8688bca6d30da116fe16e6b1a3f6095eb | Triage

Sharing

General

Target

a25384a50bece6cefbc853d787d65ab8688bca6d30da116fe16e6b1a3f6095eb
Size

1.2MB
MD5

8912bc744f7dcea9e2defff02a15ca24
SHA1

a26dae9e5b5e71ccb5321e28b07ae63bc2ee62ab
SHA256

a25384a50bece6cefbc853d787d65ab8688bca6d30da116fe16e6b1a3f6095eb
SHA512

eb510bf65b60c3326834cb370e9a2a1de5e7847069a0f8043af63ffa62230d3d08870969c3a7512cc834a0cf9e93ffc8db5cd6606551cb0e3f47df49c63a723b
SSDEEP

6144:+S1FFkBGs5bc5tHBonRQ11OAhOBzqok5Y6Sk7nKd6YZwz+3meeKNf:+S1zkkNtheQPImYa7KZNmeeK

Score

10^/10

rat asyncrat

Malware Config

Signatures

Async RAT payload 2 IoCs

Processes:

resource	yara_rule
sample	asyncrat
static1/unpack001/PO_45_13.SCR	asyncrat

Asyncrat family
asyncrat

Files

a25384a50bece6cefbc853d787d65ab8688bca6d30da116fe16e6b1a3f6095eb
.iso
PO_45_13.SCR
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 394KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ