Overview

overview

10

Static

static

10

KilluaTool.exe

windows7-x64

10

KilluaTool.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    KilluaTool.exe

  • Size

    47KB

  • MD5

    32138e40286114b68bc3a49f650dea63

  • SHA1

    ec788672aa913e462fdce22192ff1d7a353afc05

  • SHA256

    08f51dfd2a31cbc5a79eeaaa336dd145b386acc31b877bbf2f439fce3a843a11

  • SHA512

    a8c316b13d23d4d8a5936b865d9b347a1f9b7b8d0c81cdee2b07747184aef2c27703e89f567ebee100b7a932795472e69e0911664f7384c0b443bdaef439ae94

  • SSDEEP

    768:yuSzyfTAYJTbWUnj+zmo2qLhkVJOzSPIbYwPA8iG0bpe8wbrQcCAO90JACaQAo4r:yuSzyfTAWq2PV4z7swPpiJbpe8cQc3jI

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/raw/s14cUU5G

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • KilluaTool.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections