Resubmissions

15/04/2025, 16:04

250415-thygmaxnx3 10

15/04/2025, 16:00

250415-tfx33stvaw 10

General

  • Target

    file.exe

  • Size

    45KB

  • MD5

    d93b7b6fe46a1c6168c2b11ef711eb82

  • SHA1

    b114d91e35b8ebc9709fe4df64153df271dd3602

  • SHA256

    6b53024a6bcb610eca943feea6587847eeaab18945fd8667941266d5de852445

  • SHA512

    fbd77d12665aec3c3b1697da5328d234c88b9876c9eea37c6cefa1163cecd06d7f9859233f3e409e14e4b212a8b9def7e6ae98d4d8d52414524b4b75a88c48ea

  • SSDEEP

    768:yuPfZTg4pYiWUU9jjmo2qrYKjPGaG6PIyzjbFgX3iaL5OKa+ly0Io0qBDZqx:yuPfZTgKa2BKTkDy3bCXSaLsAln00dqx

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.8

Botnet

Default

C2

cryptoghost.zapto.org:2000

Mutex

Dm4vMelJMBBG

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
  • Asyncrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • file.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections