General

  • Target

    a456228d31127c994d8aca4528aa6e4a

  • Size

    1.0MB

  • MD5

    a456228d31127c994d8aca4528aa6e4a

  • SHA1

    06932318dac5e628cf0ac426f9176d773e48c4df

  • SHA256

    33ff4954bd11c5f41452c2054bc1a793520bc4a05a04c2fcf56d54c0e259f41e

  • SHA512

    aee7e1670d2352e36d3c2184ef27c6d3b749c406d4d02459d8fb9b1b0d053c7d6ebc0e68856d604f7052f31c83603284cc14b69e9cb8cb070ada759c7d23da23

  • SSDEEP

    24576:Y30KnOLnkDHv4oMypgkd6hJeDLMpMR1A99uq+A5Ax:HKOLnOHv/b6veDLMpMLA9H+A5q

Score
10/10

Malware Config

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Beds Protector Packer 1 IoCs

    Detects Beds Protector packer used to load .NET malware.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a456228d31127c994d8aca4528aa6e4a
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections