General
-
Target
test.exe
-
Size
63KB
-
MD5
dbae7f28a979f484c12c8c92296cd395
-
SHA1
6df8059bf64596a7c3b143e236f28cab457cbf5b
-
SHA256
fe404c8344b09746442737bcc3ea63ec8bb38a6d96d3d549aafbcb5428efae7b
-
SHA512
468e5b3e919272657437116474935c925db1970db5483bdd88b049abd955be12163e32a89ed3cbe3ed5d7932cafe66cdb18718914677e1744f7299c040302703
-
SSDEEP
768:iil3pYNlrm78RIC8A+XjOpeyr61urX1+T4uoSBGHmDbDTph0oX/jES4ryYSu4dph:Dyr0In0tYUbJh9/jgau4dpqKmY7
Score
10/10
Malware Config
Extracted
Family
asyncrat
Botnet
Default
C2
146.70.129.19:38371
Mutex
RDKMYv迪ΔW艾RΗxC伊1Yd伊רE6L
Attributes
-
delay
1
-
install
true
-
install_file
kokot.exe
-
install_folder
%AppData%
aes.plain
Signatures
-
Async RAT payload 1 IoCs
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
test.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections