Overview

overview

10

Static

static

10

dc418453bf...28.exe

windows7-x64

10

dc418453bf...28.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dc418453bf88c80f1116fea30fceb6ede7dcb91739b97efded4beb3a1b9aba28.exe

  • Size

    74KB

  • MD5

    b4e559ce25c07161c4ffc5b1ec1ee6bc

  • SHA1

    f133f2776fdfa1c6eabf32a1213162d76cd0587a

  • SHA256

    dc418453bf88c80f1116fea30fceb6ede7dcb91739b97efded4beb3a1b9aba28

  • SHA512

    d20bbd0e8f48c6a7140abe7ac2bcbb48f3e96842a48d848d91bbea1a8970170362a441df41cf43b6c79ce886aacbed22123f87792313451bd1690c4052069500

  • SSDEEP

    1536:aUZGcx5NVCMoPMVWe9VdQuDI6H1bf/T6XNBQzcZLVclN:aU8cx5zHoPMVWe9VdQsH1bfWnQQBY

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

Venom Pwn3rzs' Edtition v6.0.1

Botnet

Default

C2

15.228.170.102:5000

Mutex

roynkrcujtpz

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Detects executables attemping to enumerate video devices using WMI 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dc418453bf88c80f1116fea30fceb6ede7dcb91739b97efded4beb3a1b9aba28.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections