Resubmissions

24-12-2023 02:06

231224-cjg3laffc9 10

24-12-2023 02:05

231224-chxrnadbbj 10

General

  • Target

    b47c77d237243747a51dd02d836444ba067cf6cc4b8b3344e5cf791f5f41d20e.zip

  • Size

    8.8MB

  • MD5

    61262de3304f237ce1db620981b5df02

  • SHA1

    c85fd70faa8d4e927a6fdfd584a2ccfc657f44f4

  • SHA256

    461fd63e7113ef8e6cfef0be9a3735a3be36a6d662e9d3aa5b44886da2eb56f7

  • SHA512

    ad9c6f147d6ecac3c0118a7200e089c2e6e275ae1d6186fd49d587b04271aafc1c92d9e6ec6449086d513026e2908f4980060da459063fb65eeca255ab3f1d16

  • SSDEEP

    196608:UvTd62cj9t/VnaA/l5MiWwUByNSmhnWRlFAq6HzFIlyX:UvTibVnrnMii7mt8/D6hIlyX

Malware Config

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • BoratRAT 1 IoCs

    BoratRAT is an all-in-one malware toolkit that is capable of a variety of destructive activities, including acting as a ransomware, and performing credential theft.

  • Boratrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b47c77d237243747a51dd02d836444ba067cf6cc4b8b3344e5cf791f5f41d20e.zip
    .zip

    Password: infected

  • b47c77d237243747a51dd02d836444ba067cf6cc4b8b3344e5cf791f5f41d20e.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Sections