Overview

overview

10

Static

static

10

Install.cmd

windows7-x64

10

Install.cmd

windows10-2004-x64

10

Loader.exe

windows7-x64

10

Loader.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    xMainDab1.rar

  • Size

    28KB

  • MD5

    7711ef6982aad3537bbb2ad306dffee2

  • SHA1

    da3e21b6964e61829b10fb4b53680827f2fdb1cc

  • SHA256

    e2025b1f07285cf7a6cb0dbcd05933db631202a3af5af06719548f01ba2fe73f

  • SHA512

    39c413b512b3809a79d27e118ebaddd2a50cc679b5a38c1166e24ecdc66b2d853c3868d8ce98fcb05d99f32d9e9dbd3af23131f2b825d7cac30bdc4e16147aca

  • SSDEEP

    768:BiMXBSYAZLEVkN/VNbfc5NcyEnShO6oqtu+/V18mbI:BRXBoZLrNfTmTeeZu+/m

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

anyone-blogging.gl.at.ply.gg:22284

Attributes
  • delay

    1

  • install

    true

  • install_file

    Windows.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xMainDab1.rar
    .rar
  • Install.cmd
    .cmd .vbs
  • Loader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections