Overview

overview

10

Static

static

10

EpicGamesA...re.exe

windows7-x64

10

EpicGamesA...re.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    EpicGamesAccRestore.exe

  • Size

    47KB

  • MD5

    83029e82b5a4e0984e31aa60a6d9ddb9

  • SHA1

    6cffb1980135ecfc81fdcdc8a314c646359a1c0b

  • SHA256

    828d34b1bb49b9227e5702bf6ea6a20884c574d08114368c58628331e04ddb41

  • SHA512

    2d2f422af451389ba4d0e435eb599b0d571399d598546845f5d7ea42330cb0879f364df89d5fa7234aa8247a05740d38dc9b0c9ba2af0b354c452c8007e36e91

  • SSDEEP

    768:YztOtILKimG+Li5emApiP8YbjgewzFYt1wuvEgK/JnZVc6KN:YzIK5BAWzb8pmUunkJnZVclN

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

C2

127.0.0.1:8848

127.0.0.1:1604

127.0.0.1:10739

7.tcp.eu.ngrok.io:8848

7.tcp.eu.ngrok.io:1604

7.tcp.eu.ngrok.io:10739
Mutex

Explorer

Attributes
  • delay

    1

  • install

    true

  • install_file

    Aichaygmwekqkfnqw.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat

Files

  • EpicGamesAccRestore.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections