Overview

overview

10

Static

static

10

69752d14fe...5c.exe

windows7-x64

10

69752d14fe...5c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    69752d14fe08b0affcd7dc893f25b9a2d396b1b39f0b2ff9879bba04cc7ba95c.exe

  • Size

    66KB

  • MD5

    2cd138772e9b01708a4d07e4ae92d231

  • SHA1

    013abb63b84b32faaa30cb789cdfc31319f7ca4d

  • SHA256

    69752d14fe08b0affcd7dc893f25b9a2d396b1b39f0b2ff9879bba04cc7ba95c

  • SHA512

    f88a78fbb3dbe46fcb59dc29fffe79b75088a3223f8838970cb0bd15724851a149a2fc6ead90c874a70d076cd12f9dbeca35355bc323229d5a3fa8b6ec2f4177

  • SSDEEP

    1536:/qCTtoHDUkQaIKuGUYFVoB+ehbXuJXZHQl8VrXlTGhx:/qAoHDUkuKuGUYFVolhbXMpwl8VlSx

Score
10/10
ratprueba-cookiesasyncrat

Malware Config

Extracted

Family

asyncrat

Version

| nelsontriana980

Botnet

Prueba-cookies

C2

subdominiodesub.duckdns.org:6606

Mutex

AsyncMutex_GNhcP0aLwKV1

Attributes
  • delay

    3

  • install

    false

  • install_file

    WD.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Detects file containing reversed ASEP Autorun registry keys 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 69752d14fe08b0affcd7dc893f25b9a2d396b1b39f0b2ff9879bba04cc7ba95c.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections