Overview

overview

10

Static

static

10

Plugins/0g...oG.dll

windows11-21h2-x64

1

Plugins/59...uJ.dll

windows11-21h2-x64

1

Plugins/9O...Pn.exe

windows11-21h2-x64

10

Plugins/EV...LC.dll

windows11-21h2-x64

1

Plugins/FBSyChwp.dll

windows11-21h2-x64

1

Plugins/G3...uZ.dll

windows11-21h2-x64

1

Plugins/K8...WP.dll

windows11-21h2-x64

1

Plugins/KN...Hs.dll

windows11-21h2-x64

1

Plugins/PK...TS.dll

windows11-21h2-x64

1

Plugins/Recovery.dll

windows11-21h2-x64

1

Plugins/Rs...xj.dll

windows11-21h2-x64

1

Plugins/Wk...pi.dll

windows11-21h2-x64

1

Plugins/fzAgyDYa.dll

windows11-21h2-x64

1

Plugins/mM...GA.dll

windows11-21h2-x64

1

Plugins/ma...EC.dll

windows11-21h2-x64

1

Plugins/oYsKwDG.dll

windows11-21h2-x64

1

Plugins/sJ...zK.dll

windows11-21h2-x64

1

Plugins/yL...2P.dll

windows11-21h2-x64

1

Plugins/zV...LS.dll

windows11-21h2-x64

1

Stub/Stub.exe

windows11-21h2-x64

10

skibidirat.exe

windows11-21h2-x64

10

Resubmissions

16-11-2024 13:28

241116-qq11yaxejd 10

16-11-2024 13:22

241116-ql9ghs1mcj 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SkibidiRat.rar

  • Size

    15.7MB

  • MD5

    b84a38504866111a035a9e567ead6ca3

  • SHA1

    5ef7181ca36b0a237a9e76132c5932e5ffcd16d6

  • SHA256

    671c2b036deed4e63f32adb4834fc6b2d9479d04a64025fa0245e6797add02e6

  • SHA512

    c84237ff1335f91a0aae7d84352fb448736a2832d4607644f9029b8b4f4e1bb0ec30f76db2e597d98b60d24fe328da992790f79323a9a0d09f1fe5f92bfa9a79

  • SSDEEP

    393216:QKiDspAE+d0SUbaceHogUhh35S9CtIdwZfBNZBhM1HzfyQZCnbnpjdD:niDsMd+bacGqhpICQwRm1HrZcnbnp9

Score
10/10
identifierratarrowratasyncrat

Malware Config

Extracted

Family

arrowrat

Botnet

identifier

C2

IP:PORT

Mutex

mutex

Signatures

  • Arrowrat family
    arrowrat
  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • SkibidiRat.rar
    .rar
  • Anarchy.pdb
  • Plugins/0guo3zbo66fqoG.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/59Zp7paEHDF7luJ.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/9Ood5SWkbwPn.AnarHs
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Plugins/EVa7gBMKoaHmLC.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/FBSyChwp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/G3nl0mDcABnDuZ.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/K8oCBS3ThnW0WP.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/KNTmoSnG.AnarHs.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/PK0TcnqTGFagQTS.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Recovery.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/RssCnLKcGRxj.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/WkUP83aP9CABpi.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/fzAgyDYa.AnarHs
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/mML6WKMqdxjDGA.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/maSN8TBMgUEC.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/oYsKwDG.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/sJ88z8tsg5XzK.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/yL9x34D8X3oO2P.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/zVvPGvK64uLS.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Stub/Stub.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • skibidirat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • skibidirat.exe.config
    .xml