General
-
Target
bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec
-
Size
167KB
-
MD5
2494ddf095f3ad52f3ce518c45e37815
-
SHA1
fef7060001121af7720efc877adb57b3a0770e6c
-
SHA256
bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec
-
SHA512
6b1f703c94dcb3b5d33f303dd18c633863f846beb51ce06c574a0030ba7d8e90d71b76893fcf71947186e53567fa8ba9c54cccdce8453610b93df31dad992bf8
-
SSDEEP
3072:Kiuo2wrg+t38kRKQ9pgEvGW2e861u/s9b2JtD1wZp+Wp+WIrk:Cwg+t3DgEvTV91Ss9bY7KdIr
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
0.0.1
Botnet
Default
C2
bigdaddy-service.biz:6606
bigdaddy-service.biz:7707
bigdaddy-service.biz:8808
https://api.telegram.org/bot1887752763:AAEFHUQhXilkF7u0X0Uqs-Po7aZUCtVrohg/sendMessage?chat_id=1096425866
Mutex
AsyncMutex_6SI8OkPnk
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
Async RAT payload 1 IoCs
-
Asyncrat family
-
StormKitty payload 1 IoCs
-
Stormkitty family
Files
-
bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections