Overview

overview

10

Static

static

10

Malcat_v0....en.exe

windows7-x64

7

Malcat_v0....en.exe

windows10-2004-x64

7

out.exe

windows7-x64

out.exe

windows10-2004-x64

Malcat_v0....er.exe

windows7-x64

10

Malcat_v0....er.exe

windows10-2004-x64

10

Malcat_v0....64.zip

windows7-x64

1

Malcat_v0....64.zip

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Malcat_v0.9.2_Win_&_Ubuntu (Malcat (0.9.2-2023) binary analysis software Windows & Ubuntu).zip

  • Size

    104.1MB

  • MD5

    b2f05e49e64afabebe2b350c2b6409aa

  • SHA1

    b8c2aed95263fcccd590caa50526e9127a6d52f9

  • SHA256

    e667ca84d761eb07f72f4cb423a3ab9e8b55e958288be848d385b27621195949

  • SHA512

    c7243d1ab6b1ce3e2d91c775fce8d7e9b0cd7a1bbe87fe6cd35cff1ebf2dd3302467093898208e311eadac039d7f2f92049499b1c74a5c38c29fbedfb2949d32

  • SSDEEP

    1572864:gb6Ca88xyH/NOeh8KivL0eN/uu7r69LpPp075sJbz2Dc48ykiB9jh94WBIy/+7QO:s6BFw/N9+bL79Gpm7cP2DDxP9NP8ZXpx

Score
10/10
upxratdefaultasyncratstormkitty

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808

https://api.telegram.org/bot5344934242:AAF3rLeFDCGd-IVKJG_PU99MSQjdKyNgeR0/sendMessage?chat_id=1619136628
Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • StormKitty payload 1 IoCs
  • Stormkitty family
    stormkitty
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Malcat_v0.9.2_Win_&_Ubuntu (Malcat (0.9.2-2023) binary analysis software Windows & Ubuntu).zip
    .zip
  • Malcat_v0.9.1_Win_&_Ubuntu/Malcat_Keygen.exe
    .exe windows x64


    Headers

    Sections

  • out.upx
    .exe windows x64


    Headers

    Sections

  • Malcat_v0.9.1_Win_&_Ubuntu/anonymousdevilsec.txt
  • Malcat_v0.9.1_Win_&_Ubuntu/cracker.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Malcat_v0.9.1_Win_&_Ubuntu/malcat_ubuntu22.zip
    .zip
  • Malcat_v0.9.1_Win_&_Ubuntu/malcat_win64.zip
    .zip