General

  • Target

    client.bin.exe

  • Size

    144KB

  • MD5

    f4fdcb900e7af47100ac9e46945fbd55

  • SHA1

    c1d235a9a2cae8d5a8d4f6ceb4eab9417e1b1fb2

  • SHA256

    9160b90fa4a6a9cf22f943dba92cec64e2dc03c2317b5d9ab50a753fc410ce43

  • SHA512

    236eef98d4695a5e1224a87a1dc598639e5c49f6dd192a96cc1b9f8305faa57078deb62d73906a33ba1c1fac4fa5ccc5f344a0f196dbba718b76a36667984ac2

  • SSDEEP

    3072:Bsp9iv+DYM5ob0HGNSKsstcnZTJQDgWPaySsdH5boWz:Op9iTMSb0mgKFcQjhdH

Malware Config

Extracted

Family

arrowrat

Botnet

%Group%

C2

%Hosts%:%Ports%

Mutex

%MTX%

Signatures

  • Arrowrat family
  • Async RAT payload 1 IoCs
  • Asyncrat family

Files

  • client.bin.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections