Overview

overview

10

Static

static

10

2720-13-0x...ry.exe

windows7-x64

2720-13-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2720-13-0x0000000000400000-0x0000000000416000-memory.dmp

  • Size

    88KB

  • MD5

    55e0e1bd845835dc4b9641c957bf6b6f

  • SHA1

    f9858ac623369bfa67f7eb832ba69e521908fe2d

  • SHA256

    fac74e7b010a0f27bd7f8e3cd21dfe84407d19ccc5229f0177f572be2710f315

  • SHA512

    503155017e1c126de06554168763924a54df0ee7844f635c49086b836254f4d1f3c89aa8e726d0a95aca5e07708e8d8ab0240cc8b70d346de3664f50bc4d9983

  • SSDEEP

    1536:DmfWSqHdykrVMKuJUYF/kVCy8b5AP8wCrmTG5x:DmeSqHdykGKuJUYFsQy8b5lECx

Score
10/10
ratraz-exeasyncrat

Malware Config

Extracted

Family

asyncrat

Version

| Edit 3LOSH RAT

Botnet

RAZ-EXE

C2

amm.mine.nu:1335

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2720-13-0x0000000000400000-0x0000000000416000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections