Overview

overview

10

Static

static

10

Steam Chec...er.exe

windows7-x64

10

Steam Chec...er.exe

windows10-2004-x64

10

Steam Chec...ip.dll

windows7-x64

1

Steam Chec...ip.dll

windows10-2004-x64

1

Steam Chec...et.dll

windows7-x64

1

Steam Chec...et.dll

windows10-2004-x64

1

Steam Chec...gn.dll

windows7-x64

1

Steam Chec...gn.dll

windows10-2004-x64

1

Steam Chec...ts.dll

windows7-x64

1

Steam Chec...ts.dll

windows10-2004-x64

1

Steam Chec...rk.dll

windows7-x64

1

Steam Chec...rk.dll

windows10-2004-x64

1

Steam Chec...il.dll

windows7-x64

1

Steam Chec...il.dll

windows10-2004-x64

1

Mono.Cecil - Copy.dll

windows7-x64

1

Mono.Cecil - Copy.dll

windows10-2004-x64

1

Steam Chec...er.dll

windows7-x64

1

Steam Chec...er.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_517d641dad9471b535955fcf15ab628b58c78084f2239f6846b64c36f9411c93

  • Size

    940KB

  • MD5

    4d6ab20585485a36d039dfb3b5a65657

  • SHA1

    b5f7372330f0d5610ba5f052f583d7da7004ba57

  • SHA256

    517d641dad9471b535955fcf15ab628b58c78084f2239f6846b64c36f9411c93

  • SHA512

    9f35e6c774715b2bb85362c52802a703caf95ce7e90a548c2aab4e66710a21edb0cd74efc123bd75debd52aa06d1c93315b6fe93ab5217443b992ab5a3138d69

  • SSDEEP

    12288:WrWqDE9wXjSqvSlOCzIZQtEsc5RlQfW1ejAKrfwZJwUDCEJl0MZdrWqDEfrWqFxL:WrV9XzvUzImE1R493ue0rJlz/rVOr3h

Score
10/10
ratdefaultasyncratstormkitty

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808

https://api.telegram.org/bot1931615329:AAFxC8GzmBvOI3AyvA7Xz9jpOCJy7wc6kXg/sendMessage?chat_id=1130730583
Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • StormKitty payload 1 IoCs
  • Stormkitty family
    stormkitty
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_517d641dad9471b535955fcf15ab628b58c78084f2239f6846b64c36f9411c93
    .rar
  • Steam Checker by MrViper/Steam checker.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Steam Checker by MrViper/configs/DotNetZip.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Steam Checker by MrViper/configs/Extreme.Net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Steam Checker by MrViper/configs/MetroFramework.Design.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Steam Checker by MrViper/configs/MetroFramework.Fonts.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Steam Checker by MrViper/configs/MetroFramework.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Steam Checker by MrViper/configs/Mono.Cecil.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Steam Checker by MrViper/configs/Sysconfigs.rar
    .rar
  • Mono.Cecil - Copy.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Steam Checker by MrViper/configs/compiler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections