General

  • Target

    Infected.exe

  • Size

    63KB

  • MD5

    8eecb122a1a79dcf2b800e7d9c9bb1a4

  • SHA1

    4097a285a4ef1311137d6789e081fbb63849e595

  • SHA256

    85716564e84fd6d1ea7ad2b54732afece9598a878703232f00031ffcdc06b694

  • SHA512

    967da10e79123359c6782dbb4da961ffd2e575da52888b3772a07e3e584fe9e80807b6cd48b458f08f9e40695e62c108ed0dc610b8021202311803ae6e56a2a8

  • SSDEEP

    768:Qv7M2nr/978dQC8A+XjlazcBRL5JTk1+T4KSBGHmDbD/ph0oXEcguVe3i7sSu0dP:M5/V/dSJYUbdh9yUNru0dpqKmY7

Score
10/10

Malware Config

Extracted

Family

asyncrat

Botnet

Default

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

  • pastebin_config

    https://pastebin.com/raw/wXYjM7Vm

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Infected.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections