Overview

overview

10

Static

static

10

0248a7d6b6...ae.exe

windows7-x64

10

0248a7d6b6...ae.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0248a7d6b6e9c7623e9bc5023a76b424e79236b75cc7516e0195874bd28b42ae.zip

  • Size

    29KB

  • MD5

    3ea316d54fbabf9526c5d331cd349962

  • SHA1

    90459355d49db49ebe137b789fd0564a6afb6aca

  • SHA256

    96639805d77446bb317c6fc74262276e57e69c84154dfcbb55d0fdbec66ca960

  • SHA512

    5eaecb450638a192fb0bb2c91b35dab457544b8791ea5eec70cb8fd0f0b6e75f2a8241a3498c0e85a89837be579e9501ec84419fcaf2ae0bf66bea82a52fed6c

  • SSDEEP

    768:CX3nQF+HmYtePbptE+1P7csR71Vyg2A5lxtXjzSJ7KdSu8V7DV:CQFDYtKb7l7cuUgp5l/XjziPPXV

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

Mutex

wL7U4T2m4PLm

Attributes
  • delay

    3

  • install

    true

  • install_file

    LoL mod grafik .exe

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/raw/s14cUU5G

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0248a7d6b6e9c7623e9bc5023a76b424e79236b75cc7516e0195874bd28b42ae.zip
    .zip

    Password: infected

  • 0248a7d6b6e9c7623e9bc5023a76b424e79236b75cc7516e0195874bd28b42ae.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections