General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
asyncrat
Version
0.5.8
Botnet
Default
C2
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
127.0.0.1:4470
127.0.0.1:1337
Mutex
QQJBm0alB0p0
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Targets
-
-
Asyncrat family
-
Async RAT payload
-
Downloads MZ/PE file
-
A potential corporate email address has been identified in the URL: web-vitals@3
-
Executes dropped EXE