Overview

overview

10

Static

static

10

rat_dump.exe

windows7-x64

10

rat_dump.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    rat_dump.bin

  • Size

    45KB

  • MD5

    c5a1c573f399e60294a6c9cc4f5795b2

  • SHA1

    f9d93a6a33c2cc9fdd67b3384b36d5e14d10ae3c

  • SHA256

    f316db30e3a572b84f35cf5317c83078eeca9e61c9e954763278758d43d340e0

  • SHA512

    8f5c8f47a9702a35a62e95ada76c833d7f817ed31c689f2b5b1a47a8c487d3a41bb15364b5ac5af0aa5b9e9d6dc38908e82279c13c6be906931aca69d37f5178

  • SSDEEP

    768:BuwCfTg46YbWUn8jjmo2qrOYuI5tByxwPINbjbUgX3i2QK93nV43GBDZKx:BuwCfTgp/2hYr5yNPb7XS2QK93VcIdKx

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

jajo0.ddns.net:2410

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rat_dump.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections