Overview

overview

10

Static

static

7

okay.exe

windows7-x64

10

okay.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    okay.exe

  • Size

    290KB

  • Sample

    240712-ll9easzerc

  • MD5

    954889c4811c77ddfca3ecda53610bc8

  • SHA1

    06574a89057467d47b10c54eed979da30a78accc

  • SHA256

    b8c84924513d884b978ec22d2697d09cffc174e9f8f1af17365bf3f57b2cf5f9

  • SHA512

    14802bd3a21331c11f5dd1300810d235b87aace42d58c1684574c9d5652b2ec7e53badccd6e5a3e062cc3ba6fb5b82ada395d1d0559cc5ee66d5d71b6854d43e

  • SSDEEP

    6144:W9YN14B3nGgEQiFr6fY50Sj4VayUNYkd6Nr+ycVu4/plmoCIA:W9YN6B3nf41tEIN16N6yku6ot

Score
10/10
asyncratratspywarestealer

Malware Config

Targets

    • Target

      okay.exe

    • Size

      290KB

    • MD5

      954889c4811c77ddfca3ecda53610bc8

    • SHA1

      06574a89057467d47b10c54eed979da30a78accc

    • SHA256

      b8c84924513d884b978ec22d2697d09cffc174e9f8f1af17365bf3f57b2cf5f9

    • SHA512

      14802bd3a21331c11f5dd1300810d235b87aace42d58c1684574c9d5652b2ec7e53badccd6e5a3e062cc3ba6fb5b82ada395d1d0559cc5ee66d5d71b6854d43e

    • SSDEEP

      6144:W9YN14B3nGgEQiFr6fY50Sj4VayUNYkd6Nr+ycVu4/plmoCIA:W9YN6B3nf41tEIN16N6yku6ot

    Score
    10/10
    asyncratratspywarestealer

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks