Overview

overview

10

Static

static

10

Melonloade...er.exe

windows7-x64

10

Melonloade...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Melonloaderinstaller.exe

  • Size

    85KB

  • MD5

    fa71ad818f4acd9a353b3768c34277c5

  • SHA1

    c7a4c2137287549dfd90f228ddc8bf3c3e61ab28

  • SHA256

    2ab61dcd70dd811228e99b3d7ff0d7579593e273c4f5e292707c48c5d52efe67

  • SHA512

    91c7e8ed90ecdb8713a89e99789fac2cf2abb1e56e18aa491cf3dd49af76a6cd488a0bd9c32a2b6edea72666297012adfeb65806788b5dc5f1bca93707a52cea

  • SSDEEP

    1536:nu/6ZTgle2Dw3zr+7baSo8VL552GMXYdsQScFY/YQULA+wgvbx:nu/iTgle2kjr+7baSXL5nrzio7Rx

Score
10/10
ratfdkasyncrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

FDK

C2

ny-case.gl.at.ply.gg:60515

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Melonloaderinstaller.exe
    .exe windows:4 windows x86 arch:x86

    Password: hjk409hj2409hj244h09j24h24mhpookpoekheaheahaehaehhjk409hj2409hj244h09j24h24mhpookpoekheaheahaehaehhjk409hj2409hj244h09j24h24mhpookpoekheaheahaehaehhjk409hj2409hj244h09j24h24mhpookpoekheaheahaehaehhjk409hj2409hj244h09j24h24mhpookpoekheaheahaehaehhjk409hj2409hj244h09j24h24mhpookpoekheaheahaehaeh

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections