Overview

overview

10

Static

static

10

5eb123b4e7...18.exe

windows7-x64

10

5eb123b4e7...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5eb123b4e7bfe6f6e870d37c792dc124_JaffaCakes118

  • Size

    45KB

  • MD5

    5eb123b4e7bfe6f6e870d37c792dc124

  • SHA1

    b534431d705d7ed190c9d34871bcba3a725082e4

  • SHA256

    a01caef54f1106d9456a404afa839d97d2a1b6f299d262b76aec33682f99629d

  • SHA512

    9b5bfa04997512e35fd6cda80f9b7b3d270e321a3201b7b59d316b8a2b58245a2f990810b976b5399c75479f0813592b4a5eca3720beb1a081661402f9250087

  • SSDEEP

    768:vuwCfTg46YbWUn8jjmo2qrDKjGKG6PIyzjbFgX3i7sWwDvhCBDZSx:vuwCfTgp/2OKYDy3bCXSQrr2dSx

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

10.0.1.10:6606

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5eb123b4e7bfe6f6e870d37c792dc124_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections