General
- Target gg88211.com
- Size 47KB
- Sample260807-kbmbcaal7y
- SHA256 c6bffa29e7257d05bd9f13b7f65caad9319e9fce87f3108dbd37d2f72ae941d6
- MD5 323064439bcc7c51717d8c19724041f6
- SHA1 345f13193be0500b92d8c08691e68eda438305ac
- SHA512 78a9d7a70a02552fba71fed3b6913b1cc10f71b0c5f0da66801ce5449b3b2462e263509d1d289488fd1a424a02e8fbf78cba1e9b2e5b3c04c92649ed5421378f
- SSDEEP 768:BOEuILWCKi+DiPufa/bfC6OiGt8Yb/g3enAPSsvEgK/JrZVc6KN:BOtmoUW6QtzbIOnGSsnkJrZVclN
- TLSH T18F235D003798C136E3FD4BB4A8F3A2418279D66B5D03DA596CC814EA1B13BC6D6136FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
gg88211.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
asyncrat
Version
-
1.0.7
Botnet
-
Default
C2
-
gg88211.com:443
Mutex
-
DcRatMutex_qwqdanchun
Attributes
-
delay
1
-
install
false
-
install_folder
%AppData%
aes.plain
Targets
-
- Target gg88211.com
- Size 47KB
- SHA256 c6bffa29e7257d05bd9f13b7f65caad9319e9fce87f3108dbd37d2f72ae941d6
- MD5 323064439bcc7c51717d8c19724041f6
- SHA1 345f13193be0500b92d8c08691e68eda438305ac
- SHA512 78a9d7a70a02552fba71fed3b6913b1cc10f71b0c5f0da66801ce5449b3b2462e263509d1d289488fd1a424a02e8fbf78cba1e9b2e5b3c04c92649ed5421378f
- SSDEEP 768:BOEuILWCKi+DiPufa/bfC6OiGt8Yb/g3enAPSsvEgK/JrZVc6KN:BOtmoUW6QtzbIOnGSsnkJrZVclN
- TLSH T18F235D003798C136E3FD4BB4A8F3A2418279D66B5D03DA596CC814EA1B13BC6D6136FE
- MD5 SHA1 SHA512 SSDEEP TLSH