General
-
Target
https://mega.nz/file/cHtgXRDK#MzCSaqS2U8z4AYQvlj_heJ7V2xhzvzGTeCrfDCWQgO8
-
Sample
240514-q51nqaaa46
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://mega.nz/file/cHtgXRDK#MzCSaqS2U8z4AYQvlj_heJ7V2xhzvzGTeCrfDCWQgO8
Resource
win10v2004-20240426-en
windows10-2004-x64
21 signatures
150 seconds
Malware Config
Extracted
Family
asyncrat
Botnet
Default
C2
127.0.0.1:3232
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Targets
-
-
Target
https://mega.nz/file/cHtgXRDK#MzCSaqS2U8z4AYQvlj_heJ7V2xhzvzGTeCrfDCWQgO8
-
Detect ZGRat V1
-
StormKitty payload
-
Async RAT payload
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Executes dropped EXE
-
Loads dropped DLL
-