Overview

overview

10

Static

static

10

aliexe.exe

windows7-x64

10

aliexe.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aliexe.exe

  • Size

    62KB

  • MD5

    63bf8f12fe0888f2ff1bde122aeca21f

  • SHA1

    0aaffbdf45abc2cd919d32d19206bbbd04e56802

  • SHA256

    ed7156a259cecc750c121faed21545185d9436de677556ef9e271e519073fb34

  • SHA512

    3b75ef81b6911d3126ed2430554143f0801da7cc3e1d1685b3b2b677cacd4113cd9bd27cc98b83b5e78aea789a05c8b9d7fa6fc2b7a713d5db161079d78ef3e9

  • SSDEEP

    768:rHrBQOGhV1Xj+IfxXiYo3PbE5HGfAp0IMeIcm7/RrabXFEY88phq73chWkq32WxK:rLKVFQY95mIaP1cyobXda7F2nq7wx

Score
10/10
ratledger mohamed popasyncrat

Malware Config

Extracted

Family

asyncrat

Version

| Edit 3LOSH RAT

Botnet

LEDGER MOHAMED POP

C2

dynsys.is-a-guru.com:6606

dynsys.is-a-guru.com:7707

dynsys.is-a-guru.com:8808
Mutex

AsyncMutex_g

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aliexe.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections