Overview

overview

10

Static

static

10

New folder.zip

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    New folder.zip

  • Size

    23.9MB

  • MD5

    e375652893ddbd33f75bb2c6140b50d5

  • SHA1

    24dc691908d5c1776a8fbae12cfd2a0239634c7e

  • SHA256

    2eae73d060cc2bdf615de1ee8dbb7db3c0ac8e927d516e437af0b6a3b5cb5a95

  • SHA512

    3f69725e98cd8935455e6506f48e09d2d7dff2cbf05f3791206a145767fb906a749997a464b2ec63933b1ff802e470a3e1b982988c51cd6a12cb5f09154720c5

  • SSDEEP

    393216:FyyYJrpV7UxnZaEZkAgcGvEbeprRI9HwYz8GwwU5GUVhZMIOPWa/FB6MSVtdXgLl:FyrpV72ZaEZAcCzRNnGUVhZMrrn6MCRa

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808
Mutex

QdNftpHJFSw4

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 2 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 47 IoCs

    Checks for missing Authenticode signature.

Files

  • New folder.zip
    .zip
  • New folder/AsyncClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/AsyncRAT/AsyncRAT.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/AsyncRAT/AsyncRAT.exe.config
    .xml
  • New folder/AsyncRAT/BackupCertificate.zip
    .zip
  • ServerCertificate.p12
  • New folder/AsyncRAT/Fixer.bat
  • New folder/AsyncRAT/Plugins/Chat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/AsyncRAT/Plugins/Extra.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/AsyncRAT/Plugins/FileManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/AsyncRAT/Plugins/FileSearcher.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/AsyncRAT/Plugins/LimeLogger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/AsyncRAT/Plugins/Miscellaneous.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/AsyncRAT/Plugins/Options.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/AsyncRAT/Plugins/ProcessManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/AsyncRAT/Plugins/Recovery.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/AsyncRAT/Plugins/RemoteCamera.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/AsyncRAT/Plugins/RemoteDesktop.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/AsyncRAT/Plugins/SendFile.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/AsyncRAT/Plugins/SendMemory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/AsyncRAT/ServerCertificate.p12
  • New folder/AsyncRAT/Stub/Stub.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/Borat/BackupCertificate.zip
    .zip
  • ServerCertificate.p12
  • New folder/Borat/BoratRat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/Borat/BoratRat.exe.config
    .xml
  • New folder/Borat/ServerCertificate.p12
  • New folder/Borat/bin/Audio.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/Discord.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/Extra.dll
    .dll .ps1 windows:4 windows x86 arch:x86 polyglot

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/FileManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/FileSearcher.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/Fun.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/Information.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/Keylogger.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/Borat/bin/Logger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/MessagePackLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/Miscellaneous.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/Netstat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/Options.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/ProcessManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/Ransomware.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/Recovery.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/Regedit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/RemoteCamera.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/RemoteDesktop.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/ReverseProxy.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/SendFile.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/SendMemory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Borat/bin/ip2region.db
  • New folder/Borat/clints files/builder.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/Borat/raw/Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/Build.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/Hiddenz Crack Ponyo -/Hiddenz Crack Ponyo - Kopya/FontAwesome.Sharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Hiddenz Crack Ponyo -/Hiddenz Crack Ponyo - Kopya/Hiddenz's HVNC.conf
    .xml
  • New folder/Hiddenz Crack Ponyo -/Hiddenz Crack Ponyo - Kopya/Hiddenz's HVNC.dll
  • New folder/Hiddenz Crack Ponyo -/Hiddenz Crack Ponyo - Kopya/Hiddenz's.dll
  • New folder/Hiddenz Crack Ponyo -/Hiddenz Crack Ponyo - Kopya/HiddenzHVNC.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/Hiddenz Crack Ponyo -/Hiddenz Crack Ponyo - Kopya/Profiles/JSB
  • New folder/Hiddenz Crack Ponyo -/Hiddenz Crack Ponyo - Kopya/cGeoIp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Hiddenz Crack Ponyo -/Hiddenz Crack Ponyo - Kopya/desktop.ini
  • New folder/Hiddenz Crack Ponyo -/Hiddenz Crack Ponyo - Kopya/dnlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections