Overview

overview

10

Static

static

10

fucked.exe

windows7-x64

10

fucked.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fucked.exe

  • Size

    47KB

  • MD5

    b5c0b79597cbc68ea87dfdfee8aafdcb

  • SHA1

    e901e2a8cb1226a7a24e09d517157db283225d80

  • SHA256

    752db95c5934113d3ab9ad5501a81c77dd967ef5a3d106bb934dfec0e3d8e952

  • SHA512

    2ef13683ef9bcfa0c61f5ab28cfc77aa1cfe242ffd52983f6fe612fb8a0e11157bdb58e9defc0f3f89bf2574e2a5596464af9cb6140e9f51c7a9defc845a442d

  • SSDEEP

    768:X2uwCfTg46YbWUn8jjmo2qr5CfmacdPI85z3i9NUKjbYuNDdaRGO7FKMBDZEx:X2uwCfTgp/26aca85urbYyDIRGuFdEx

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808
Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fucked.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections