Overview

overview

10

Static

static

10

test.exe

windows10-1703-x64

10

test.exe

windows10-2004-x64

10

test.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    test.exe

  • Size

    63KB

  • MD5

    b3d01bc6330dc1f960e0a3b28fd6c7d2

  • SHA1

    c1bf78d5be2b0db5074d3a6bd588d42e7984561d

  • SHA256

    91d3ab6c2704b6471a45e0d5dd3537acd3058656d6f9b9c8194946974d8079a1

  • SHA512

    959c24e5a03a4926ec4016443d6a8413e4c1fd81731cdbcd2dd0f2ad837f72c4ca9101c9263ec00339d6405396afdc02349a31b6c8b1aaaa39f0b7c153a2cbfa

  • SSDEEP

    768:yfLDqQkNP78i3C8A+XOGpeyr61urX1+T4uoSBGHmDbDTph0oX9otnWevLL0XvlS3:WmNvJn0tYUbJh96kevLLlucdpqKmY7

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

central-aberdeen.gl.at.ply.gg:8000

central-aberdeen.gl.at.ply.gg:10404

147.185.221.20:8000

147.185.221.20:10404

72.216.117.218:8000

72.216.117.218:10404
Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections