Overview

overview

10

Static

static

10

651a56ee18...e4.exe

windows7-x64

10

651a56ee18...e4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    af94ed7f3753e67fa820ca99b7995358.bin
  • Size 32KB
  • Sample230819-cezf3sff44
  • SHA256 a34f0541a9ed9bd072bd14d70b570044d270dab481adfd7b16174eb0e65898e7
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

  • asyncrat

Version

  • | Edit 3LOSH RAT

Botnet

  • Default

C2

  • code2023.kozow.com:8000

Mutex

  • AsyncMutex_Default

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • af94ed7f3753e67fa820ca99b7995358.bin
    .zip 32KB
  • 651a56ee18ac1ce6da9740eba94ecd5027593d13d4bd58c72ed71c8e8a714fe4.exe
    .exe 66KB

af94ed7f3753e67fa820ca99b7995358.bin

  • SHA256 a34f0541a9ed9bd072bd14d70b570044d270dab481adfd7b16174eb0e65898e7
  • MD5 SHA1 SHA512 SSDEEP
Password
infected