General

  • Target

    Client.exe

  • Size

    48KB

  • MD5

    f2b266c30eac9b09442822207a2a61b9

  • SHA1

    2f008e6af15016eb132fceb2ac69c60dc2a25dec

  • SHA256

    04d0d56c9dc5cb16aa86474ecd5b68a481ad27d6248f72febbd0f99442a629b9

  • SHA512

    bebff3828d7c3caf3ef84233a7cddc41251863ae908b56cf0ceb3c85c7aa94b3a7b47ace4457f5c2f5b3e452bfdf7ae721be3cc535c0486f6323e8e63edf8b68

  • SSDEEP

    768:AeNIr/GoWvj1jGXL3osPLcYr1th3yF9GDIrh0bmpwIXhFeX5v5pZffYDDGZ2tYch:A8G73oZYZHKr2bmpwi7eXh5n6DGZKmVY

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.6B

Mutex

wkrewrabzccdzqknvcq

Attributes
  • delay

    5

  • install

    false

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/raw/aEid41SM

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections