Overview

overview

10

Static

static

10

THISISARAT.exe

windows7-x64

10

THISISARAT.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    THISISARAT.exe

  • Size

    47KB

  • MD5

    4744dae074b1b9c94c131aefa1f3827c

  • SHA1

    927c9ae343d07004ea1a618a0ef228a26649eb92

  • SHA256

    f2451118fa6c3e2c0f09e71c60cf29021f0736c47abd236e892f33ccb2ddd98e

  • SHA512

    4211db34221c07b5842f6fdbfa83be11861d28ab1036224a0a8b7f695a8bf1c78422c86685cfa9cef6c503d9638d4420418c180870202c1de1766435a58c0be6

  • SSDEEP

    768:xuETKT0k3qXWUrV6e1mo2qyI/L8CX5a15WSPImqMaHnQ0b9V6KySeZ19X6Qs2mP9:xuETKT0cE2/CL8S5C5W7mqMgn7b9WZ1Q

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808
Mutex

5Lk431gyJhat

Attributes
  • delay

    3

  • install

    true

  • install_file

    THISISARAT.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • THISISARAT.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections