General
-
Target
Infected.exe
-
Size
63KB
-
MD5
acf842e711f0ff3a309a0980b15ecc75
-
SHA1
146e15ee92d62d2447c741cc51f5166d735eab96
-
SHA256
6504bd2c4ba71171438468cf137433063ed3ad9f6a2981226e7cdba30dc15143
-
SHA512
ad3e44b6519ff4c22d8922a5b600bc9aea9c3176dd1735221cdae917846978b54dea80d365684784037e6064ee264b4d1f4ded6998f9c53b376916a0d306123b
-
SSDEEP
768:iit3pYNlrm78RIC8A+XjqazcBRL5JTk1+T4KSBGHmDbD/ph0oXdheUarKSu4dpqM:jyr0AdSJYUbdh9+Uar9u4dpqKmY7
Score
10/10
Malware Config
Extracted
Family
asyncrat
Botnet
Default
C2
fl-survivor.gl.at.ply.gg:23531:4444
Mutex
德IHקu9שlتH尺L9ΓΕdNhd
Attributes
-
delay
1
-
install
true
-
install_file
sigma.exe
-
install_folder
%AppData%
aes.plain
Signatures
-
Async RAT payload 1 IoCs
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Infected.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections