Overview

overview

10

Static

static

10

bawless-client.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bawless-client.exe

  • Size

    65KB

  • MD5

    65381c449100b2b0f547f59c7aaa7101

  • SHA1

    c49ce90432156aa8baca2732e8a087ceec8ea199

  • SHA256

    bb09ed5d136789a959b1cd832b1479bb8357e22c19f47cee9e017108f277d44e

  • SHA512

    68a5813ae035b2eac366985a4000e5cf716d110f256cec5150b8f80137583681aefcffd9817b8bf7625b6322f440fa6f4c3d6fe234a447c7369df02b6d5df4eb

  • SSDEEP

    1536:hTn/rlEQ/l4d3ZnWSazRg9Sw1bbsZxRKoBv+asdNpqKmY7:lnF/l4BZWRyV1bbsZaoRKdWz

Score
10/10
ratrtjlaasyncrat

Malware Config

Extracted

Family

asyncrat

Version

Bawless Remote

Botnet

RTJLA

C2

127.0.0.1:80

Mutex

6RAWIQFXG

Attributes
  • delay

    0

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bawless-client.exe
    .exe windows:4 windows x86 arch:x86

    Password: 1234

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections