Overview

overview

10

Static

static

10

bRp4.exe

windows7-x64

10

bRp4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bRp4.exe

  • Size

    48KB

  • MD5

    1321973dd6f6284dd108b164588b67ec

  • SHA1

    a072b1d08eb4046c99537db24396922228472ec5

  • SHA256

    7c5e0f8301f5a0c665ef8bc1a7c7cef2b0806c56fd1a45e9e9768d36a4562c0c

  • SHA512

    545f431ddd6df28154fba2558cbbc657cee0ba09f4110057ccf8102761be4fea8b77e597ee52986c6665468830a71d9322fca85eb892229e622af789f89a4337

  • SSDEEP

    768:g9umxLiIL1CaS+DidYIOIJik9/78Yb4geaJdOgnvEgK/JLZVc6KN:g9uAPWdYS/7zbvFTnkJLZVclN

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

C2

2.tcp.us-cal-1.ngrok.io:5000

192.168.81.147:5000
Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bRp4.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections