General

  • Target

    bgfbgbf.exe

  • Size

    47KB

  • MD5

    7c6639fdafe9ded30bfc4bc6fdf2484b

  • SHA1

    51afcbb510f4db29c3da8db614a41abc220be493

  • SHA256

    dc8fa18a06c6a264d5d9f6a820857b8017183ffbc60de3fcdea52d4ea56b7881

  • SHA512

    874ca5d93854c0e938297878e4d44b965c4a97bb223246a112ee8826b6a2c3bb32c040f63ffd4c28217f68c57abab1feb037ac1168652b4244189b35f93120b4

  • SSDEEP

    768:4uPfZTg4pYiWUU9jjmo2qrM5G3x8SJgorPISUld0bflPbm71+FT+f6SBGUc0kYBv:4uPfZTgKa2jexHSoUSUIbflDtFCNbhd1

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

since-searching.gl.at.ply.gg:64197

Mutex

Xc60tiWQ5q7F

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bgfbgbf.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections