Overview

overview

10

Static

static

10

912-58-0x0...ry.exe

windows7-x64

912-58-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    912-58-0x0000000000400000-0x0000000000416000-memory.dmp

  • Size

    88KB

  • MD5

    e3aa7dc80f04a3dfd669c88a91963639

  • SHA1

    7502e57589e383fa1391e792ec58011de65719cc

  • SHA256

    713f045e6770bc645945dcfd395fc7e613ecba4917d3d89232351bdcc71aa4f7

  • SHA512

    4af1a8a00cb08b8a779ed725ca989a21bd6a0012e8eb7a32d76a2b571ce9c2c29785cf37e6a75d441aa060ef74e2925eb5d261d7ed44ed20a5412b4dbb714acd

  • SSDEEP

    1536:EhjkxLDRwQuNMXbmaeCs2tMyy+tz2wpzT4h1GbbYsBjeNzG:EhjkxLDRwQuNMXbreKtMyy+tKa4vGbbo

Score
10/10
munabcasyncrat

Malware Config

Extracted

Family

asyncrat

Version

5.0.5

Botnet

MunaBC

C2

piddix.duckdns.org:4449

Mutex

muna123456789

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 912-58-0x0000000000400000-0x0000000000416000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections