Overview

overview

10

Static

static

10

cl2.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cl2.exe

  • Size

    63KB

  • MD5

    940feefa06903f38abf31638bb3c8274

  • SHA1

    54ce0795ed9ba72d7546eb90b4c7b77de5eda26d

  • SHA256

    cf1ac26fdc15cd34b9fdc6a6906b323db066e00d63a421cc376129d86645b1d7

  • SHA512

    f035a88739f1520b9ea419a129fe6afa460cdaabc3d84a584edfb8854e406dd4c501e1c3ff3bca36ab4b2b2f001cae731fc8c5d4b806e4c78eb58d04d939b6b3

  • SSDEEP

    1536:qEXiftfNjJTSvYUbih9ogpcousdpqKmY7:qZftFjJTYYUbiNc6Gz

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

5.tcp.eu.ngrok.io:12431

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cl2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections