General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
asyncrat
Version
0.5.8
Botnet
Default
C2
192.168.1.63:7118
192.168.1.63:37454
tcp://Wagner123-60799.portmap.host:7118
tcp://Wagner123-60799.portmap.host:37454
Mutex
4wMHcxbOKref
Attributes
-
delay
3
-
install
false
-
install_file
update
-
install_folder
%AppData%
aes.plain
Targets
-
-
Asyncrat family
-
Async RAT payload
-
Downloads MZ/PE file
-
A potential corporate email address has been identified in the URL: [email protected]
-
Executes dropped EXE