Overview

overview

10

Static

static

10

installer.exe

windows7-x64

10

Resubmissions

03/06/2023, 09:43

230603-lqarjagd58 10

03/06/2023, 09:39

230603-lmrkwagg2x 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    installer.exe

  • Size

    63KB

  • MD5

    c72f493d552ef259e50768d98a923a23

  • SHA1

    9cd15f95d676bcbeb75118758af38cb313e1d5cd

  • SHA256

    0940d5d69c68eee07bff935ce8f4f00e9fbc2c6d51d85243da0d460243b32dc9

  • SHA512

    30aeb30b4a7682dd3a1317d257a3a33951dafdf18209ac4e3725935b1219b79af493b4ee4220e74a79028fc7123eeb39478dec963a01698990b77281e287c936

  • SSDEEP

    1536:vuBZNTRlk2HRasgeSbA2+dIQEg7XVdhJ1zu+:vuB3TRlk2AsgeSbAtE+XVjJI+

Score
10/10
rattest880asyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

test880

C2

20.84.181.62:11647

20.84.181.62:25565

20.84.181.62:4355

20.84.181.62:7293

209.25.141.212:11647

209.25.141.212:25565

209.25.141.212:4355

209.25.141.212:7293

62.122.170.171:11647

62.122.170.171:25565

62.122.170.171:4355

62.122.170.171:7293

netfamily.windowshost.ru:11647

netfamily.windowshost.ru:25565

netfamily.windowshost.ru:4355

netfamily.windowshost.ru:7293
Mutex

Mutex_6SI8OkPnk

Attributes
  • delay

    10

  • install

    true

  • install_file

    OpenHardwareMonitor.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • installer.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections