aphrobyterat | Aphrobyte[.]v1[.]9[.]2[.]zip

resource	yara_rule
static1/unpack001/Aphrobyte v1.9.2/Aphrobyte v1.9.2/.buildmodules/sample.py	family_aphrobyterat

resource
unpack001/Aphrobyte v1.9.2/Aphrobyte v1.9.2/Aphrobyte.Builder.exe

Aphrobyte.v1.9.2.zip

SHA256 69947ec68e159519a397a09724677d08814de5164f242d17a8cd7cd6adbb4345
MD5 f4a664258aba355a8b1392024c7c5887
SHA1 878f01f24f60de8344764b534aff4ef1fab0c6ec
SHA512 dfe29454c2da55c8f139566cd1120f6a3896eea7eeebd672da6ba1b8dc4ae19bcd75113845d3a3bf6501918a06a0bf125be483d357cbcf840b36b6d6442a2ae2
SSDEEP 1536:756WKiMhmAKxH1C85HWYqo2qqZLtM1odUhbp+F79A8ON:V6LiM4f1b5dhqRYxMFJIN
TLSH
T1B4830290D527EAAFE3889075FA2433198656DCCE63E8CF7FE21C014EA5C3561868551F
MD5 SHA1 SHA512 SSDEEP TLSH

Aphrobyte v1.9.2/Aphrobyte v1.9.2/.buildmodules/exeic.ico

SHA256 0f71ed87b41029fc99573d175f17b36d00cdbc5b6bb9c2c72b31d636c9e1b390
MD5 89666d30630f88129a43286a19ec3b65
SHA1 e125cd94ec968190f803cd7f3c63729f8260bebe
SHA512 a81bf617c87b71689cacbabda31818171c7084b601cf738d3ab0f6e013a4c9e212816be54609a92b54ca966f6c3b3180271f6f90b4b37d2d6ee0d50c4e1ae6aa
SSDEEP 192:lY2F3991ZuphyY8PGCz9QwAODCGQyBbd2/0rfqg6j4Tq58RI7MeZ:lY2LHZ2
TLSH
T12A13AEF08EF5B9A5E1193073B864B13C37C75D0EDCA55836E69BF54A34628C220E9E1B
MD5 SHA1 SHA512 SSDEEP TLSH

Aphrobyte v1.9.2/Aphrobyte v1.9.2/.buildmodules/requirements.txt

SHA256 b1522b0644fe4c8d5ce9636630f3c514ad6172755c5e11870685db04e6a40b9d
MD5 430e27652cbc799cb5b12eacbc30738e
SHA1 c46be9c72d82cd01a5217ec24f7aa755b8f16bcd
SHA512 29f4119ae82b16ac74445f31e56034e7c0aabc1754e6905e5f2066acfc8e5bd945c621c47a91f7ab8e4c97a0a3bb6599da4c9d0d210c0386b369028a6529c0d4
TLSH
T1A9D012579E0592DB0E5EEF888512C120108672C02D602DE4630B9C3A58547BA6F5C95B
MD5 SHA1 SHA512 TLSH

Aphrobyte v1.9.2/Aphrobyte v1.9.2/.buildmodules/sample.py

SHA256 00f1c406c6f69c2bb1e7882a9f3fa604ed271fbda6bbd1ee57c18239fae21be8
MD5 d5816f353270ef57f65182c83a19f000
SHA1 b830e71e51c7be354c5ba331d528f7fd9be10e96
SHA512 c331867cd8f80a0e77a47a1d92d63e4319800c65ffaa878690f9b9fa810b3024674139ded42d0d9b22bdf84d71903e91e3bc8d7cf01b730cee3dc37a5acd3293
SSDEEP 768:Its8j8sBaRRscTvYnfUvfuTgtUIxYhfpYhPoIaVMJANHVxBy5l/:IaOhBaRRs89Ygt+VKAJVHA
TLSH
T1954383209CBE14215572E24DE832C057E219B3079A327A577BBCD1C85F79832D7A87EE
MD5 SHA1 SHA512 SSDEEP TLSH

Detects AphrobyteRAT infostealer.

Aphrobyte v1.9.2/Aphrobyte v1.9.2/Aphrobyte.Builder.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 071246949f7cf75bfb0ef404ba8b9119d80b113dbf658f3e8153208358cb4b49
MD5 07b69fce04ee5fa115563626888a2603
SHA1 24d9ac7b9fcdda1747d45f43dae6e5b24884b376
SHA512 fa055e8adada2dc6bc71dd72a425162eb80fd5ffa4a812d4073080eea002083090ba46138e40905900764d5f2d7b958d0265643002c8c0f014af8f45dab4ad8d
SSDEEP 1536:fXAWbIC59yfixc+BPbL9Or/1/Qf7ffZ3994m34va+qe59yxixuu:fXAWbP9cSJcp/Qf7fh33p34va+q294Y
TLSH
T1B4444955B6B8D813EDA212F5CCB6FB758A237DA41494D7A68DC13DAF79B1F000D02A07
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

169754

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\RIOT\source\repos\aphrobyte-discord-rat\obj\Release\aphrobyte-discord-rat.pdb

Aphrobyte v1.9.2/Aphrobyte v1.9.2/README.md

SHA256 fb79008afeb22f9ebf8a0e47a7d0d8dbb124a4ae17649b51b837074fdaf7b0fb
MD5 eaa81cd318bd213186fc19ea9681bd0f
SHA1 42708bec480e4b06ba7f01210ca51e3d0d9b72b5
SHA512 5f66f4d4480df83833ce5c26303bf0845dbea928866cc29ebc148ee20e2c1fca3b3bd4bdbc5e7df96cdc9e4c791ce2dd3084586dc54bb7db32bcd7d3f5a076c4
TLSH
T16F1102AFB2B5327423571363354D31A8E9B278E1965413EC94EF1084C2C627352F76A5
MD5 SHA1 SHA512 TLSH

Aphrobyte.v1.9.2.zip

Aphrobyte v1.9.2/Aphrobyte v1.9.2/.buildmodules/exeic.ico

Aphrobyte v1.9.2/Aphrobyte v1.9.2/.buildmodules/requirements.txt

Aphrobyte v1.9.2/Aphrobyte v1.9.2/.buildmodules/sample.py

Aphrobyte v1.9.2/Aphrobyte v1.9.2/Aphrobyte.Builder.exe

mscoree

dotnet

Aphrobyte v1.9.2/Aphrobyte v1.9.2/README.md

Sharing

General

Malware Config

Signatures

File Explorer

Aphrobyte.v1.9.2.zip

Aphrobyte v1.9.2/Aphrobyte v1.9.2/.buildmodules/exeic.ico

Aphrobyte v1.9.2/Aphrobyte v1.9.2/.buildmodules/requirements.txt

Aphrobyte v1.9.2/Aphrobyte v1.9.2/.buildmodules/sample.py

Aphrobyte v1.9.2/Aphrobyte v1.9.2/Aphrobyte.Builder.exe

mscoree

dotnet

Aphrobyte v1.9.2/Aphrobyte v1.9.2/README.md