General
- Target ERHecfXH.exe
- Size 45KB
- Sample210221-7lrppmls6s
- SHA256 c75f28cdb21bec49700a7579d3b630074e3fb6de4cda70c5937dcd8424bbebbf
- MD5 6a805f1a1df03ae286bd3b8ae0ace7f0
- SHA1 0317b6e7538ac19fe4cfe46922e43ee0b67a65bb
- SHA512 1bee80a58370e618b3af30ad469e5fb83fda206fca52f90ca5775f06d95cf2f3e9618a7792eeb01d6c459123a79494640043668a2c128f6f10b94a9f775cdb08
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
ERHecfXH.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
ERHecfXH.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
asyncrat
Version
-
HDBRAT
C2
-
121.137.39.135:5050
Mutex
-
bjgmuqaiwwqr
Attributes
-
aes_key
IwUfQtVL9IybmIwLRMQJE9pj5DBkkFb5
-
anti_detection
false
-
autorun
false
-
bdos
false
-
delay
Default
-
host
121.137.39.135
-
hwid
3
- install_file
-
install_folder
%AppData%
-
mutex
bjgmuqaiwwqr
-
pastebin_config
null
-
port
5050
-
version
HDBRAT
aes.plain
Targets
-
- Target ERHecfXH.exe
- Size 45KB
- SHA256 c75f28cdb21bec49700a7579d3b630074e3fb6de4cda70c5937dcd8424bbebbf
- MD5 6a805f1a1df03ae286bd3b8ae0ace7f0
- SHA1 0317b6e7538ac19fe4cfe46922e43ee0b67a65bb
- SHA512 1bee80a58370e618b3af30ad469e5fb83fda206fca52f90ca5775f06d95cf2f3e9618a7792eeb01d6c459123a79494640043668a2c128f6f10b94a9f775cdb08
- MD5 SHA1 SHA512
Score1/10