General
- Target jaffacakes118_payload5
- Size 63KB
- Sample260912-v334aatwe1
- SHA256 6747dc7b5bc8316bc46d679a292d8d19700dc5f3aff9a36691c1aac808979c54
- MD5 28da734bb9398988c1f8cb70a9bde24a
- SHA1 16a2a67e95da17ed498f7e8b3dbe2bc85b5c50f8
- SHA512 b840843f2ddcf5da81d029bd54c6124ed25ae9fd9daa89578ca0fae9e5d5ea7e25cd780d02cd40f8a2689cbd3a933515896473eb07178a4c870ac4bc5299ca6d
- SSDEEP 1536:rmImx6tX2kNff4sKu+UYFQ/NqJ5bGAPpXuS8S5GcrPlTGNx:rm9x6tmkN7Ku+UYFpJ5bGEnBdex
- TLSH T1015308013BE98029F3BF8FB469F6618506F9F4AB2D12C55D1CC514CF0622B869A41BFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
jaffacakes118_payload5.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_payload5.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
asyncrat
Version
-
| CRACKED BY https://t.me/xworm_v2
Botnet
-
Tar Startup
C2
-
regeditwindows.duckdns.org:9000
Mutex
-
AsyncMutex_6SI8OkPnk
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Targets
-
- Target jaffacakes118_payload5
- Size 63KB
- SHA256 6747dc7b5bc8316bc46d679a292d8d19700dc5f3aff9a36691c1aac808979c54
- MD5 28da734bb9398988c1f8cb70a9bde24a
- SHA1 16a2a67e95da17ed498f7e8b3dbe2bc85b5c50f8
- SHA512 b840843f2ddcf5da81d029bd54c6124ed25ae9fd9daa89578ca0fae9e5d5ea7e25cd780d02cd40f8a2689cbd3a933515896473eb07178a4c870ac4bc5299ca6d
- SSDEEP 1536:rmImx6tX2kNff4sKu+UYFQ/NqJ5bGAPpXuS8S5GcrPlTGNx:rm9x6tmkN7Ku+UYFpJ5bGEnBdex
- TLSH T1015308013BE98029F3BF8FB469F6618506F9F4AB2D12C55D1CC514CF0622B869A41BFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10