General
-
Target
245a975c226ec82bcc974723b9fe4ace5521725501ec5c9c76110dbb1017077d
-
Size
170KB
-
MD5
7c3f3c658c7c5a91eb8b3b076a2d64d6
-
SHA1
a219e2540a74c986e037e87570fa1e7221c88bda
-
SHA256
245a975c226ec82bcc974723b9fe4ace5521725501ec5c9c76110dbb1017077d
-
SHA512
aa218c900faed69bd2ae53c6af8fff2faed2a0f89de3664bb31604b697bde64a5ed2c1e09aa006aa71adcd3ae09959dc61b9f6735fb22baaba289bf8a6dcb5a0
-
SSDEEP
3072:++STW8djpN6izj8mZwmHWknRPdxqIPu/i9boJ2cQsk6+Wp7:j8XN6W8mmmL/XPSi9bEC
Score
10/10
Malware Config
Extracted
Family
asyncrat
Botnet
Default
C2
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
https://api.telegram.org/bot5345460701:AAELDlYM_8yHwfKYHoYl_27JYXLpT-SLsyY/sendMessage?chat_id=689992339
Mutex
AsyncMutex_6SI8OkPnk
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
Async RAT payload 1 IoCs
-
Asyncrat family
-
StormKitty payload 1 IoCs
-
Stormkitty family
Files
-
245a975c226ec82bcc974723b9fe4ace5521725501ec5c9c76110dbb1017077d
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections