General
- Target main.exe
- Size 93.0MB
- Sample240328-2d6ansac51
- SHA256 45ca8ba08363bfb80551cd15ee9958934039bede8de0c588d23ef8ced100b0f2
- MD5 0bba67e18b475d65cd2553717eb67904
- SHA1 4557bac315bfcd79c5a3d0605102cc37ad8dabc7
- SHA512 d93cdb7f0b9c42eab8b33b30b51251395a8e5d93bcf8fcc597426a3975ea6fbcd0ea4bed4796e1223d27c412b207d91b6a076a132c825ee39fd0998d2ad7dcef
- SSDEEP 786432:Ar1MtCpZwufu9HAuJgoruTt5rs3wbvMhPF:Y14CpZwufaHH9uTnqwbg
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Malware Config
Extracted
Family
-
asyncrat
Version
-
1.0.7
Botnet
-
Default
C2
-
127.0.0.1:5050
-
127.0.0.1:36301
-
character-acquisitions.gl.at.ply.gg:5050
-
character-acquisitions.gl.at.ply.gg:36301
Mutex
-
DcRatMutex_qwqdanchun
Attributes
-
delay
1
-
install
true
-
install_file
DO NOT DELETE COMPUTER AT RISK.exe
-
install_folder
%AppData%
aes.plain
Targets
-
- Target main.exe
- Size 93.0MB
- SHA256 45ca8ba08363bfb80551cd15ee9958934039bede8de0c588d23ef8ced100b0f2
- MD5 0bba67e18b475d65cd2553717eb67904
- SHA1 4557bac315bfcd79c5a3d0605102cc37ad8dabc7
- SHA512 d93cdb7f0b9c42eab8b33b30b51251395a8e5d93bcf8fcc597426a3975ea6fbcd0ea4bed4796e1223d27c412b207d91b6a076a132c825ee39fd0998d2ad7dcef
- SSDEEP 786432:Ar1MtCpZwufu9HAuJgoruTt5rs3wbvMhPF:Y14CpZwufaHH9uTnqwbg
- MD5 SHA1 SHA512 SSDEEP
Async RAT payload
Executes dropped EXE