General
-
Target
1304-25-0x0000000000400000-0x0000000000412000-memory.dmp
-
Size
72KB
-
MD5
48c356ded023d60282ca26717fcc4671
-
SHA1
428a70b734f37324e9d9308fa6395c77c373af2c
-
SHA256
6d80ce96810fca94b27fd74dda41d95a993b9f83b6b87da95361748bbd8937f4
-
SHA512
1a715e51ae37a030a5972c35094fb1eccbdaa3cc02f610af561e195eb4e890e85b6613c29a5696e0fbcbcc5f750ae4e0402c58d88535793fb65954a730444cca
-
SSDEEP
768:rg3d9ILWN6y+8ia0nVjgLORp8Ao7i0YYbhgetY/gs5pbvEgK/JDZVc6KN:834NaiGLAGXbOv/gsnnkJDZVclN
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
1.0.7
Botnet
KLLL
C2
148.113.165.11:3236
Mutex
Dggx_gg
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1304-25-0x0000000000400000-0x0000000000412000-memory.dmp
Headers
Sections