Overview

overview

10

Static

static

10

NuclearRat....8.exe

windows10-2004-x64

10

NuclearRat....8.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NuclearRat.exe.1.8.exe

  • Size

    76KB

  • MD5

    eec7a5928ec96c9f2733d328aa3d30fc

  • SHA1

    4f9d8ace1f5407ee6c5ba4e2947b53a12cb0721a

  • SHA256

    a1155e2b51e2f8baeed2992b17329108cddc45faf19ac0024cd5efd002f030ad

  • SHA512

    25e340a57913f01474919d0cff6b0785cc53614ec9e215f99505e6347fa0060ed8f40337233bf9e2b1f28cf26c43813d3e1e4aa08f222df9294552a7aac23275

  • SSDEEP

    1536:0OtmnlcQzbjt0zkAnkJYuNWjK4a2h6HLdzZWOGM41JMZVclN:ZtmnSQzbjt0w0bjsdMOGjMzY

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

C2

127.0.0.1:8848

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NuclearRat.exe.1.8.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections