Overview

overview

10

Static

static

10

2cdbe2d967...0N.exe

windows7-x64

10

2cdbe2d967...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2cdbe2d9679019e2c6af8510140c1920N.exe

  • Size

    48KB

  • MD5

    2cdbe2d9679019e2c6af8510140c1920

  • SHA1

    54224cce3a9599b0ebde07fc49fab56c33825839

  • SHA256

    03c2be86b6cb352ae7afcacac1a5aa1f36d387e19ac68f2e8fca4962fd2d6e56

  • SHA512

    162f01a99838e87cd630967d6a40835e294dca609b0490ded16e099a74db8f3c58ef5428d62f4b16d1f7e14f051e3ea1ead4e2e6ac20286a65a2b2f265a259de

  • SSDEEP

    768:BZAmcILiCu2Y+biotelDSN+iV08Ybygekb1pCvEgK/J8iVc6KN:BZAt24otKDs4zb1rbankJ8iVclN

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

Mutex

WindowsSecurityHealthService

Attributes
  • delay

    5

  • install

    true

  • install_file

    WindowsSecurityHealthService.exe

  • install_folder

    %Temp%

  • pastebin_config

    https://pastebin.com/raw/RML1A9Pm

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2cdbe2d9679019e2c6af8510140c1920N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections