General
-
Target
55c51b45267d61bbd994f135ea87add0.exe
-
Size
223KB
-
MD5
55c51b45267d61bbd994f135ea87add0
-
SHA1
5d6a15e373008b1f0fbafb763385568d93499002
-
SHA256
e8e7259207aed56b83cd1b5ff9dd85fb31b03001e8044e41707d97730a5fe72a
-
SHA512
742f7e473287cdec537bc6aabba7b373753b5384a4dd2d83be67410ad4a0a8a5e41f6614c8ce352e609b6de3e7075af2c01acd8c8ff673704d38ae89a0ca7f0d
-
SSDEEP
6144:Wwg+t3rtwtOHWSIGbXddfS/zB5gsWdkr:Wwxt3rNHWxodUzBKsbr
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
0.0.1
Botnet
Default
C2
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
104.238.147.18:6606
104.238.147.18:7707
104.238.147.18:8808
https://api.telegram.org/bot6288147390:AAEaQec7zMvW6luY8UWV4rrPbj5q4jBpAvY/sendMessage?chat_id=2023484619
Mutex
AsyncMutex_6SI8OkPnk
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
Async RAT payload 1 IoCs
-
Asyncrat family
-
StormKitty payload 1 IoCs
-
Stormkitty family
Files
-
55c51b45267d61bbd994f135ea87add0.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections