Overview

overview

10

Static

static

10

Infected.exe

windows7-x64

10

Infected.exe

windows10-2004-x64

10

Infected.exe

windows10-ltsc 2021-x64

10

Infected.exe

windows11-21h2-x64

10

Resubmissions

13-01-2025 04:30

250113-e476maylgq 10

12-01-2025 16:36

250112-t4rafasnel 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Infected.exe

  • Size

    63KB

  • MD5

    738180b2bffae37d18f98e73e2f9e48c

  • SHA1

    c23dea787e40c8a1dfee943ab6f88b61a6ca92a8

  • SHA256

    97308fe3e473c649a7b9232c399e49b5c43ffb37d84fb6c3452d1cf7101f7d36

  • SHA512

    6ae13b532f67d3a6a49656d1900af81c68ee6d962dcb4b0edabd2743a4f71b1c931bf7468d0f7a8962b4374c27e1403c0ee723605970cc5481084081278f7887

  • SSDEEP

    768:Qv0M2UM/978aQC8A+XjlazcBRL5JTk1+T4KSBGHmDbD/ph0oXsGrD82USu0dpqKX:b1/k/dSJYUbdh9x382Tu0dpqKmY7

Score
10/10
ratsroasyncrat

Malware Config

Extracted

Family

asyncrat

Botnet

sro

C2

127.0.0.1:1111

daxon.giize.com:1111
Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Infected.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections