Overview

overview

10

Static

static

10

Bawless Cr...rs.zip

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Bawless Cracked@Neural_Programmers.zip

  • Size

    13.5MB

  • Sample

    241221-qtp3va1jbl

  • MD5

    6555ada478f5009c224e953f030943ee

  • SHA1

    35719dca8ce05441e489d82f8d90debf7166ba11

  • SHA256

    35476eff95efc92ff88a5d35b8f58a46e04d4cba91746d78e6b7a206e44dd14c

  • SHA512

    bc5057d56fac9009f856a3718a243a57381e8ce2021640f96601170122b64eb0575ef8e070a0341aa6f2d5dad7f3fa93e12593c49afc9d839a6ecefa9ae5afc1

  • SSDEEP

    393216:+ylvkZPZo3MMqhaSGJ5UMQX7hAdHYWQvukalUcVotUu65:+K821dJiF7OdHYxmflDV465

Score
10/10
arrowratasyncrat%group%v62oxdiscoveryrat

Malware Config

Extracted

Family

arrowrat

Botnet

%Group%

C2

%Hosts%:%Ports%

Mutex

%MTX%

Extracted

Family

asyncrat

Version

Bawless Remote

Botnet

V62OX

C2

127.0.0.1:15

Mutex

TXIZLGTBY

Attributes
  • delay

    0

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      Bawless Cracked@Neural_Programmers.zip

    • Size

      13.5MB

    • MD5

      6555ada478f5009c224e953f030943ee

    • SHA1

      35719dca8ce05441e489d82f8d90debf7166ba11

    • SHA256

      35476eff95efc92ff88a5d35b8f58a46e04d4cba91746d78e6b7a206e44dd14c

    • SHA512

      bc5057d56fac9009f856a3718a243a57381e8ce2021640f96601170122b64eb0575ef8e070a0341aa6f2d5dad7f3fa93e12593c49afc9d839a6ecefa9ae5afc1

    • SSDEEP

      393216:+ylvkZPZo3MMqhaSGJ5UMQX7hAdHYWQvukalUcVotUu65:+K821dJiF7OdHYxmflDV465

    Score
    10/10
    asyncratv62oxdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • Async RAT payload

      rat

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks