Overview

overview

10

Static

static

10

download.exe

windows7-x64

10

download.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    download.exe

  • Size

    66KB

  • MD5

    addfb71ffe786565f2e156fb5bb45f42

  • SHA1

    fae76e1249d719564fe220435f271ff64d9435c0

  • SHA256

    b277d9efd245fc61a8832ac1ff31e64d183ecad74969579337e0bb4fbb2c4e89

  • SHA512

    b05772c8b554d08838faf0a8ab6d024f11f6ec1f8684f9bb58dae15bdeed337926b9980e23ce05214f03ea6a27e8e1d0577fd2962ae3b087a77f4dc12fc01e0c

  • SSDEEP

    1536:K2wmkPN1ak1gcKu5UYFkNfi2GhblU1GJI2/2gWrmTGxx:K21kPN1ak1Ku5UYF0fi9hblU15nFECx

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

| Edit 3LOSH RAT

Botnet

Default

C2

exos.mywire.org:6606

exos.mywire.org:7707

exos.mywire.org:8808

esxo.ddnsfree.com:6606

esxo.ddnsfree.com:7707

esxo.ddnsfree.com:8808
Mutex

AsyncMutex_x

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • download.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections