Overview

overview

10

Static

static

10

svchost.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    svchost.exe

  • Size

    47KB

  • MD5

    0394976209a74fde34c1b9b243e3d939

  • SHA1

    1847ef80dd9250d80b757c62ae3b1cc63606c627

  • SHA256

    b8534ef978f7c66132b37ecb33a0b0edb287943622aabe9c179c399889ffdcd2

  • SHA512

    2406235fffe625b710b76a948e16cf89d6566920fd3b3e5d8f367fde800ff10b7a5ac3aa647d7464487d34e052f9a52c865c98e54bd11cb6df778d40eafeb124

  • SSDEEP

    768:/uBO1TXEno4WUmriSmo2qhBrmudlsgdMPIzLOldTN3lwk0b++f/KSDUYOqPMMcBX:/uBO1TXMo2KzzLOldNUb++XKSDgqPT6X

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

127.0.0.1:8080

Mutex

aDZuFF9YxnG9

Attributes
  • delay

    3

  • install

    true

  • install_file

    svchost.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svchost.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections