Overview

overview

10

Static

static

10

delta/client.exe

windows10-2004-x64

10

delta/client.exe

windows11-21h2-x64

10

delta/fix ...ov.dll

windows10-2004-x64

1

delta/fix ...ov.dll

windows11-21h2-x64

1

delta/opengl.dll

windows10-2004-x64

1

delta/opengl.dll

windows11-21h2-x64

1

delta/pomogatel.dll

windows10-2004-x64

1

delta/pomogatel.dll

windows11-21h2-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    250421-yfptxss1f1.bin

  • Size

    10.1MB

  • MD5

    d143c3102ebd178de57ec3ef847a851f

  • SHA1

    c33fb63a1422c565a8a4429aca2d8c484e362a95

  • SHA256

    0212e629650d95fbc8c4bda730398db14cdb51b223451f44739e896e25f8b1d4

  • SHA512

    6c253f1231bb9588fc18c50be73d1d3d19e3160cfc76b1938e3eb462828146b97be670a5b46e5fdd3f2d874bc94618e1a62189e9a373e405a8765b1cbb453f1a

  • SSDEEP

    196608:czmOlVCEsJLHuFfwiB5pzmOlVCEsJLHuFfwiB5PzmOlVCEsJLHuFfwiB5A:j+jvB5s+jvB5C+jvB5A

Score
10/10
ratdefaultasyncrat

Malware Config

Extracted

Family

asyncrat

Botnet

Default

C2

genius22015-45242.portmap.io:45242

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 250421-yfptxss1f1.bin
    .zip
  • delta/client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • delta/fix ot viletov.dll
  • delta/opengl.dll
  • delta/pomogatel.dll