General
-
Target
Infected.exe
-
Size
63KB
-
MD5
4fc3c54fd9a3b96cffee040e9e80605f
-
SHA1
28c1c1537d3d8a2fcb673baac7387a13ec9b2788
-
SHA256
b64a6703c5e9e39d9c32259c970533c119f909fb2c0d7b8a4e18b4557fda2585
-
SHA512
894fe92d5e0170e27e442abaefca8132663cd5a4575c4407100a32a39c1d4f57ab1ef8a18fd7388a4b9f10af8542556f87567f4f1d150b246d7ee3cc2124a0f9
-
SSDEEP
768:Cm0vnfEXf78awC8A+XU2azcBRL5JTk1+T4KSBGHmDbD/ph0oXyEtdodHmuVqvSuS:qEXiLdSJYUbdh9yEtq9usdpqKmY7
Score
10/10
Malware Config
Extracted
Family
asyncrat
Botnet
Default
C2
own-engineer.gl.at.ply.gg:39927
Mutex
ωOz西O德NULWvLb勒IרΒ
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
Async RAT payload 1 IoCs
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Infected.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections