Static task
static1
Behavioral task
behavioral1
Sample
888 rat 1.2.1 cracked by DedSeec.com.exe
Resource
win10-20220812-en
General
-
Target
888 rat 1.2.1 cracked by DedSeec.com.exe
-
Size
23.1MB
-
MD5
04d6ba3a22b13c2ee15c0efcfbfd2571
-
SHA1
243d78d8a1a4bd6f333f389e26e583a2cda44ebb
-
SHA256
37ed081d607d88c6a43925503c20f330e853166f27de2887b348404778928b64
-
SHA512
8987f3b2f018a9267e91f0372cfbc78ce81ec94f7ebcbabec99f753e69cea5a21e8ace68f92bbe9e7d166641b856f65da343b572823f5343f7d44e32dfb5636d
-
SSDEEP
393216:oufwMCigvYFChWbRT5OV7lAUl+9o0okMLeDuq3+QAk5ubWWBwBvJ5wVu:HXZgvYYhQDOVPl+9l2+OZuhQwR/
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
888 rat 1.2.1 cracked by DedSeec.com.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 23.1MB - Virtual size: 23.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ