General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
-
asyncrat
Version
-
0.5.8
Botnet
-
Default
C2
-
107.175.202.158:6606
-
107.175.202.158:30814
-
107.175.202.158:25565
-
107.175.202.158:443
Mutex
-
anQK5EUHL5vU
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Targets
-
- Target https://github.com/BeamerNGz/csdafewafaw/blob/main/BeamNG.UI.exe
Async RAT payload
Downloads MZ/PE file
Executes dropped EXE
Legitimate hosting services abused for malware hosting/C2