Overview

overview

10

Static

static

10

f281ee0632...27.exe

windows7-x64

10

f281ee0632...27.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f281ee063206b48d5fcf7bc5e87427653a3882c403486c1ec25b4b937e167d27

  • Size

    101KB

  • Sample

    241231-pw2c8a1jbw

  • MD5

    a1fe7a12cb417958f64b2a7486d23337

  • SHA1

    bc88d369bb44e96eefad961260d8f5ed56f21d31

  • SHA256

    f281ee063206b48d5fcf7bc5e87427653a3882c403486c1ec25b4b937e167d27

  • SHA512

    5785cec36f07903239c530b15012de3f7707a471f039056aa2e8a425f620183a3988ec493ae805f45d85278b0f89dc39f5888e960dfce76007cd495cc0cf665f

  • SSDEEP

    3072:LU5cxwf3iPMVDe9VdQsH1bf4DmpQbl9m0EARiBY:Lw3iPMVDaesVb+mpH0Zw

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

127.0.0.1:4449

127.0.0.1:8080

127.0.0.1:41232

panel.zikq-shmily.com:4449

panel.zikq-shmily.com:8080

panel.zikq-shmily.com:41232
Mutex

mdhfyafeuhum

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      f281ee063206b48d5fcf7bc5e87427653a3882c403486c1ec25b4b937e167d27

    • Size

      101KB

    • MD5

      a1fe7a12cb417958f64b2a7486d23337

    • SHA1

      bc88d369bb44e96eefad961260d8f5ed56f21d31

    • SHA256

      f281ee063206b48d5fcf7bc5e87427653a3882c403486c1ec25b4b937e167d27

    • SHA512

      5785cec36f07903239c530b15012de3f7707a471f039056aa2e8a425f620183a3988ec493ae805f45d85278b0f89dc39f5888e960dfce76007cd495cc0cf665f

    • SSDEEP

      3072:LU5cxwf3iPMVDe9VdQsH1bf4DmpQbl9m0EARiBY:Lw3iPMVDaesVb+mpH0Zw

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks