General
-
Target
OTP_BOT2022.rar
-
Size
59KB
-
MD5
00769265343287bd629ae51fdacd96e6
-
SHA1
df8db640cd1041c577e2bbfcab602032a0fb9c2c
-
SHA256
385190d8956436f6aa9f405cdba47f8e773b6edbabd082e182a87e8ee31a7189
-
SHA512
3343d0e4d3ea997ee6eee74c3bb7cde6dde1825e42be17dfca3e1a285f74d2f690af2faffc6e3e87382c37d0ed31c2e52fdc6ba1a4cd6d3ca7fe404d91391ad7
-
SSDEEP
1536:ZioqWjtXRHqpUYsGsKSmLfuRzukZxqAXpdPN8Q4ZcGMJi9R:ZioBtRHqpxsGMmuRazA7PN8RczJA
Malware Config
Extracted
asyncrat
1.0.7
Default
127.0.0.1:6666
DcRatMutex_qwqdanchun
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
OTP_BOT2022.rar.rar
-
OTP_BOT2022/OTP_BOTv22.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 215KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
OTP_BOT2022/UserDetails.db
-
OTP_BOT2022/settings.cfg