Overview

overview

10

Static

static

10

bNqt.exe

windows7-x64

10

bNqt.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bNqt.exe

  • Size

    45KB

  • MD5

    543d32361abc0a522400d41716bc3739

  • SHA1

    e0d4651d92c272e61b225067628c9b55549db26e

  • SHA256

    67905601c2fc9f78274058e39de8c2714f46b40cfd29e5d5a06117fc7d07ab46

  • SHA512

    77d376576caa6ebdeba27291c2ddeebf2784c76a29ce9a9978d8c4ba33e7fa759780b8a33757a43c92bd7f2f17400ee456f6f3081afa0675ac345c0654a72e9d

  • SSDEEP

    768:bu0OVTBRlc6nWUbmelmo2qjZzjqfaKPIbejbTgX3iUxTL/vH8WUTiM1bBBDZrx:bu0OVTBnck2A5bSbMXSU1bKTVdrx

Score
10/10
ratprimas_bogoasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Primas_Bogo

C2

admina.duckdns.org:2022

Mutex

AsyncMutexfkejknerrekoihfdoinfdkldfsflksdsdfv

Attributes
  • delay

    3

  • install

    true

  • install_file

    Chrome.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bNqt.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections