Overview

overview

10

Static

static

10

2c493c99a0...4c.exe

windows7-x64

10

2c493c99a0...4c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2c493c99a0137d0064ab61279a3b824c.exe

  • Size

    63KB

  • MD5

    2c493c99a0137d0064ab61279a3b824c

  • SHA1

    c3356e966ca12df358193146b0e0cc9ffae2ba33

  • SHA256

    eb14d88ca888b4da123f5fdf79c4b9128c89b424b4f02f94562cd5eea974ac5c

  • SHA512

    c035194d84455ee3c1d12b5991d299093a1873d412e2888e472da7a1e643cbf86eb7b10d2958865949e912af6e233101156a548c945fc8e619bb5b5d56549fd7

  • SSDEEP

    1536:Sa2hiZpvskDeoKuuUYFkcU/By5bKAPa9gjcr+TG5x:Sa4ijvskxKuuUYF9My5bK1gQsCx

Score
10/10
ratwithout_encryptasyncrat

Malware Config

Extracted

Family

asyncrat

Version

| Edit 3LOSH RAT

Botnet

Without_Encrypt

C2

leetman.dynuddns.com:1338

Mutex

AsyncMutex_6gfhk656dvdfxxzA2PSx

Attributes
  • delay

    3

  • install

    true

  • install_file

    winhost.exe

  • install_folder

    %Temp%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2c493c99a0137d0064ab61279a3b824c.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections