Resubmissions

03/08/2023, 22:10

230803-13phsagc82 10

01/08/2023, 09:49

230801-ltgz1sgb3t 10

General

  • Target

    Client.exe

  • Size

    49KB

  • MD5

    4c218d58853568f346cfde0026e8dd5d

  • SHA1

    19edf34a6fa10ee20815265c5f1b606fc0c5cd2d

  • SHA256

    98a01f98e3252bba7799eacd5546f138496fb16748aa1e3a26b157bd38073078

  • SHA512

    4564c3f859f436d7c83401f879e54d1f0e0ce75a0b07ea307d4e1951604218ca39f5a7d1bb851eaeebe7a4b722e4e561beeab60a95af871880bd646862173abb

  • SSDEEP

    768:r4wAZj5rdSm3PJB+fdioxmtD0bt3NIrUWQFgaI0Flx6v1XewEViSg7sc2tYcFmVY:UnIMPP+cibBiUtqaI0X4vWQscKmVcl

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.4H

Mutex

pzrzfixevmslp

Attributes
  • delay

    0

  • install

    false

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/raw/aEid41SM

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections