Overview

overview

10

Static

static

10

bPbg.exe

windows7-x64

10

bPbg.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bPbg.exe

  • Size

    57KB

  • MD5

    9110b8fc5527f8bc9606c791d98b7c60

  • SHA1

    0bb18e805dfa000fcce1243e1b1c02c4bbdcf4d7

  • SHA256

    cd6f1689432af870c144f52458497cf59a85d4423c517eff6d63c35d9de97913

  • SHA512

    85592bdf10b8543e11df49f39c22b98e42f19887d37a0b16d920a4518804cac1e01053fe1eb9563c1fee4e2c220e053a654c23c6bc9e72f20fa5c2387fdb9a1a

  • SSDEEP

    768:Eq+s3pUtDILNCCa+DiAxxJgDHwRdCiN8Yb8gelrKavEgK/JGZvWVc6KN:Eq+AGtQOAxJCHwPzbT8KankJ8vWVclN

Score
10/10
ratkangal08asyncrat

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

KANGAL08

C2

4Mekey.myftp.biz:8848

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bPbg.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections