Overview

overview

10

Static

static

10

911.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    911.exe

  • Size

    61KB

  • MD5

    e33dcf1fd7c953f37fcd75d7dfa04e50

  • SHA1

    7b5e0d900aa722f38bc37125478d21a7f731d22a

  • SHA256

    e79f05099139c98022e7a49bc2a959564e77125b5f84fe81b6a9be4dca1e3585

  • SHA512

    d2af67f2cee8f4b5755c45fd6f8ea70aa207cb698eb70f548a0cc5099afcdf22fd794a70a30e66aad7e97555c33668590661f4fee253419d6a92cbc3bf66a426

  • SSDEEP

    768:U4fBC6zGyomoV/H7Yh9jZizjLyibvlynwx8ZsM2RLUbzg5tMeCM5c8CsoxYt1qqs:U4BltZZZBi7kntZWibs5egGWqq3W7x

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

AsyncRAT

Botnet

Default

C2

pepecasas123.net:4608

pepecasas123.mywire.org:4608
Mutex

10

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 911.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections