Overview

overview

10

Static

static

10

kenker.exe

windows7-x64

10

kenker.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    kenker.exe

  • Size

    45KB

  • MD5

    20801f02e06d4c3bfe26e244bfbb0a6f

  • SHA1

    a34238ecf97fe76a47df85b737840c96b43cd1de

  • SHA256

    c586d3544063dfb0123c23dea56c0d5f392e43e905ce036796ce1f16bb4f023b

  • SHA512

    69c9799f8d2d626abd0ba6c73fccd8e86979f029fc7cc66914c151e9fe3ed3263773717da55e4b3a9c93a36fd7c59ff1f230de75f28119570d270a8235b091e1

  • SSDEEP

    768:nus51TUq7qMFPWUDwGotmo2qzUwmYM1w7OPIMOzjbQgXBibPmFdFcqgRxBDZKx:nus51TUfMno21Vw3MO3bXXQKFdOqIdKx

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

127.0.0.1:59955

bobbawb1000.duckdns.org:59955
Mutex

n84mc

Attributes
  • delay

    3

  • install

    true

  • install_file

    zetgd.exe

  • install_folder

    %Temp%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • kenker.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections