General
-
Target
Infected.exe
-
Size
63KB
-
MD5
e93eea1b1c32f3979eaa8dcb4cc081c7
-
SHA1
823cbc2b71f7da73df610bf8ae5f16dbcea27ac1
-
SHA256
37abf2a5bfc6075b32a8fc7d98f82f3a8650d080afbb894655c8ac00dd844258
-
SHA512
d0b2895bc9bad661dbe17c4fcb6d591277d9c0d9b6ce9ee7777893f5e759c846b43ac9bafc4463be9de43e90f1b9a59804240950e45545ae0d3ad5aef65bd1a4
-
SSDEEP
768:Qv0M2UM/978aQC8A+XjlazcBRL5JTk1+T4KSBGHmDbD/ph0oXmzSM1VAnSu0dpqM:b1/k/dSJYUbdh98ZQSu0dpqKmY7
Score
10/10
Malware Config
Extracted
Family
asyncrat
Botnet
Default
C2
127.0.0.1:81
winny.ddns.net:81
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
Async RAT payload 1 IoCs
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Infected.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections