Overview

overview

10

Static

static

10

RayzzCCGen.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RayzzCCGen.exe

  • Size

    47KB

  • MD5

    4e0b735658fa061371f03ac9d765acce

  • SHA1

    298187f6e21045f4c2622b08f0b67ba2f554c163

  • SHA256

    993e909e5060d07e3c21ca483b8dc2648bf50052124d300534f3885378aa7544

  • SHA512

    7741da1d5e191a578bd4774255f112cb7bb52004f0ef0eeb66a12b6929add527dacb8c99efef71d834fbf3e6da4c11446a07b253f7d4ed8734ade415db34a137

  • SSDEEP

    768:rM1TILIe8E+0YiyxDUiZc8YbNg6XaqN7AugGvEgK/J/ZVc6KN:rMrWRHzba+aqNMSnkJ/ZVclN

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

C2

nabeellasdfasdf-52048.portmap.host:8080

nabeellasdfasdf-52048.portmap.host:52048
Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    true

  • install_file

    RAYZZCCGEN.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RayzzCCGen.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections