General
-
Target
Infected.exe
-
Size
63KB
-
MD5
8ec7864f0f24026e5da2c1a663636bec
-
SHA1
188652886a2a2e40577db931beb6fbcafa1cab4d
-
SHA256
87553a637f0e05d11c2ac76f47c434db9b51211a20d9ef2842e93c29b4e5c9a1
-
SHA512
3ad66b2a26f25be9db3ccc1cc5efbeb9b5321e6add7502b4cb5c2f49a1829c19b30ca0b50f521549477dae050e079797b4b38dcc0f7e19ce48b886b4a2482421
-
SSDEEP
768:RdGnVhwdjndk78TQC8A+XiuazcBRL5JTk1+T4KSBGHmDbD/ph0oXGfO8iOSuAdph:mnSdsNdSJYUbdh9nJZuAdpqKmY7
Score
10/10
Malware Config
Extracted
Family
asyncrat
Botnet
Default
C2
wasted9sss1-57562.portmap.host:57562
Mutex
aiרUt西i开sHFDDΗ比cg0Θ305Θا
Attributes
-
delay
1
-
install
true
-
install_file
RFGHBF.exe
-
install_folder
%AppData%
aes.plain
Signatures
-
Async RAT payload 1 IoCs
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Infected.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections