General
-
Target
OptiFine_1.19.4_HD_U_I4.jar
-
Size
6.7MB
-
Sample
241031-gt74zsznhz
-
MD5
2e58bf463ec7e9964fe381a5afc17da1
-
SHA1
40a44c00d4f06ba82e97b8eb71aab3823f4e9d93
-
SHA256
2c010bcae341cf1003c194a4b566a0cb0c8dff2443d2f9fbd9e7a2d9abc8af6a
-
SHA512
94d0673370168322cc6ba5ae7bc9ad5d5c4246aa10f8929239dedc25639255c807c32ea248ee751c42aed9ca61cf37ab391d7d3a9ba57bc643e091c9ef4009d1
-
SSDEEP
98304:+4T54pxq3gbAuFu0Lw6jEKuBj036dh1KyMH9vPMDNgPjDbHA:+4TCxq3gtFuiWKufdh1jA9H7LPg
Static task
static1
Malware Config
Extracted
asyncrat
0.5.8
Default
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
q7jNlmGQlMHA
-
delay
3
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
OptiFine_1.19.4_HD_U_I4.jar
-
Size
6.7MB
-
MD5
2e58bf463ec7e9964fe381a5afc17da1
-
SHA1
40a44c00d4f06ba82e97b8eb71aab3823f4e9d93
-
SHA256
2c010bcae341cf1003c194a4b566a0cb0c8dff2443d2f9fbd9e7a2d9abc8af6a
-
SHA512
94d0673370168322cc6ba5ae7bc9ad5d5c4246aa10f8929239dedc25639255c807c32ea248ee751c42aed9ca61cf37ab391d7d3a9ba57bc643e091c9ef4009d1
-
SSDEEP
98304:+4T54pxq3gbAuFu0Lw6jEKuBj036dh1KyMH9vPMDNgPjDbHA:+4TCxq3gtFuiWKufdh1jA9H7LPg
-
Asyncrat family
-
Async RAT payload
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-