Overview

overview

10

Static

static

10

dcratt.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dcratt.exe

  • Size

    63KB

  • MD5

    58efa839d0d139bcfa6af4e1ea77ccf3

  • SHA1

    b9558c3f42724ee4a5442bc98bb5107fa8cc9a48

  • SHA256

    fd0159f07670e56444d3a919127a644f960e1d4ad24779a23459bdbfdb0db6bb

  • SHA512

    8a839734bef3f3b7c5cb365c413d95d607875446a73fef50fc30c6f81031ef9d0be8a227b4d0c199d6f6dc7720ce85ac68505fe2fbbb26837af907d52b543a47

  • SSDEEP

    1536:UhjExLDRwQuNMXbmaeWs1lRIZaGEGbbkw7etI3ZGxZVclN:UhjExLDRwQuNMXbreFliZavGbbkmm8os

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Version

1.0.7

Botnet

Default

C2

147.185.221.24:4580

Mutex

DcRatMutex_qwqdanchun

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dcratt.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections