General
-
Target
https://www.mediafire.com/file/by9n59rwi4ek33p/Rebel.7z/file
-
Sample
241110-zgj6haxqar
Score
10/10
Malware Config
Extracted
Family
asyncrat
Botnet
Default
C2
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
Mutex
AsyncMutex_6SI8OkPnk
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Targets
-
-
Target
https://www.mediafire.com/file/by9n59rwi4ek33p/Rebel.7z/file
Score10/10-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
Asyncrat family
-
StormKitty
StormKitty is an open source info stealer written in C#.
-
StormKitty payload
-
Stormkitty family
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-