c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb
General
-
Target
Socialclub.rar
-
Size
396KB
-
MD5
f2e08ccb9dc07631220e08ec581a9e34
-
SHA1
bdcd6574a5d79fcfd74cea2aa31f722020ca6cb8
-
SHA256
b847943032293a9744a4831e1fdeabc4485d71cf44097a1c82c21b4e8fb47e62
-
SHA512
c33b212e3f6886fdbe18d338b36dab9ff2b7087dd2714990e3e85ed5926b2feaaf1d5c5bb691857dbc2e6dc69f153dc3ad4beee27a0852ff6d275079b9e9b334
-
SSDEEP
12288:g3d62BAf8rnjpJaiZqZ5g4jkUO/Yr3Lye:gNCkLva2qZ57wyr7ye
Score
10/10
Malware Config
Extracted
Family
asyncrat
Botnet
Default
C2
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
https://api.telegram.org/bot5236702741:AAEYl0F5uVbja0ncy0sx9vJHGvygeGhNV9M/sendMessage?chat_id=775796924
Mutex
AsyncMutex_6SI8OkPnk
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
Async RAT payload 1 IoCs
-
Asyncrat family
-
StormKitty payload 1 IoCs
-
Stormkitty family
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
Files
-
Socialclub.rar
-
Socialclub/Results/2fa.txt
-
Socialclub/Results/nocapture.txt
-
Socialclub/SkinSoft.Sociallclub.dll
dae02f32a21e03ce65412f6e56942daa
Headers
Imports
Sections
-
Socialclub/rockstar checker.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Socialclub/xNet.dll
dae02f32a21e03ce65412f6e56942daa
Headers
Imports
Sections