Overview

overview

10

Static

static

10

4b2e910c45...77.exe

windows7-x64

10

4b2e910c45...77.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b2e910c45f99294750c8adb3e799c39a1adfd0d9fcfdc7f36773037477ec977

  • Size

    52KB

  • MD5

    43bf2b1b12150aa4f795cb6d6eff697f

  • SHA1

    ac0ef971638009f16c8d5f2d30cb9baf656d2045

  • SHA256

    4b2e910c45f99294750c8adb3e799c39a1adfd0d9fcfdc7f36773037477ec977

  • SHA512

    0d052d66436d3590c624b4098fb21a9064497d24ca5997a88ae3159f2ad675733c8dcf7f6dc8b44b05b6a68d4c68b6af56d52bfe6c65b90c586e241bf074a5f4

  • SSDEEP

    1536:WAcOVTwJ4u2NK7wHz3bCXSnSFba5cNT+:WAcyTwJ4u2NKEz3bCMSFAIi

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

jnic.lol:80

jnic.lol:443

www.langya.shop:80

www.langya.shop:443

www.jnic.lol:80

www.jnic.lol:443
Mutex

dfQOqKWMCcqD

Attributes
  • delay

    3

  • install

    true

  • install_file

    ChenQiYuan.exe

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b2e910c45f99294750c8adb3e799c39a1adfd0d9fcfdc7f36773037477ec977
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections