General
-
Target
Melonloaderinstaller.exe
-
Size
85KB
-
MD5
fa71ad818f4acd9a353b3768c34277c5
-
SHA1
c7a4c2137287549dfd90f228ddc8bf3c3e61ab28
-
SHA256
2ab61dcd70dd811228e99b3d7ff0d7579593e273c4f5e292707c48c5d52efe67
-
SHA512
91c7e8ed90ecdb8713a89e99789fac2cf2abb1e56e18aa491cf3dd49af76a6cd488a0bd9c32a2b6edea72666297012adfeb65806788b5dc5f1bca93707a52cea
-
SSDEEP
1536:nu/6ZTgle2Dw3zr+7baSo8VL552GMXYdsQScFY/YQULA+wgvbx:nu/iTgle2kjr+7baSXL5nrzio7Rx
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
0.5.7B
Botnet
FDK
C2
ny-case.gl.at.ply.gg:60515
Mutex
AsyncMutex_6SI8OkPnk
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
Async RAT payload 1 IoCs
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Melonloaderinstaller.exe
Password: hjk409hj2409hj244h09j24h24mhpookpoekheaheahaehaehhjk409hj2409hj244h09j24h24mhpookpoekheaheahaehaehhjk409hj2409hj244h09j24h24mhpookpoekheaheahaehaehhjk409hj2409hj244h09j24h24mhpookpoekheaheahaehaehhjk409hj2409hj244h09j24h24mhpookpoekheaheahaehaehhjk409hj2409hj244h09j24h24mhpookpoekheaheahaehaehhjk409hj2409hj244h09j24h24mhpookpoekheaheahaehaeh
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections