Overview

overview

10

Static

static

10

ofalcon5.exe

windows10-2004-x64

ofalcon5.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    ofalcon5.exe
  • Size 426KB
  • Sample260620-ve34daf12m
  • SHA256 1fa1c25a5548b58a1c2dff2d92344bd85f3c52c4eff663dc0b23bbf3b594782a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
asyncratresearchrat

Malware Config

Extracted

Family

  • asyncrat

Version

  • 1.0.7

Botnet

  • research

C2

  • s.sexvip.blog:80

  • s.sexvip.blog:443

  • s.sexvip.blog:22

  • s.sexvip.blog:25

  • s.sexvip.blog:53

  • s.sexvip.blog:445

  • s.sexvip.blog:587

  • s.sexvip.blog:1604

  • s.sexvip.blog:2053

  • s.sexvip.blog:2083

  • s.sexvip.blog:2096

  • s.sexvip.blog:3000

  • s.sexvip.blog:3389

  • s.sexvip.blog:4782

  • s.sexvip.blog:5223

  • s.sexvip.blog:5432

  • s.sexvip.blog:6379

  • s.sexvip.blog:8443

  • s.sexvip.blog:8888

  • s.sexvip.blog:9000

Mutex

  • research

Attributes
  • delay

    1

  • install

    true

  • install_file

    ofalcon5.exe

  • install_folder

    %AppData%

aes.plain

Targets

    • Target
      ofalcon5.exe
    • Size 426KB
    • SHA256 1fa1c25a5548b58a1c2dff2d92344bd85f3c52c4eff663dc0b23bbf3b594782a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks