Overview

overview

10

Static

static

10

Infected.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Infected.exe

  • Size

    63KB

  • MD5

    6ebf955e667eca74175c3542178de4d6

  • SHA1

    ede474b8c1b9101424415e3b58087f1460024c31

  • SHA256

    3a280f118c4f7ac82065573f90304f21133cdb63ca937538fb204044b5a5af97

  • SHA512

    7c42c092074dcf9b664c1b0bf08d67e19880bb61bbc99411bebdabc5ff30494f6e7a9921c09434c7ad5abf1846d3779ad126c69e49841f6600f68d97b9f460fb

  • SSDEEP

    768:Cil3pYNlrm78RIC8A+XjqazcBRL5JTk1+T4KSBGHmDbD/ph0oXlE24NEMSuLbpqM:jyr0AdSJYUbdh9+vYuLbpqKmY7

Score
10/10
rattestingasyncrat

Malware Config

Extracted

Family

asyncrat

Botnet

testing

C2

147.185.221.21:35374

Attributes
  • delay

    1

  • install

    true

  • install_file

    sigma.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Infected.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections