Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
2 malicious · 4 files
BIN33d6e875441823e698ea8b8c4739dfd4AsyncRAT
EXE[Base64-Block @0x00000171]AsyncRAT
Structure
BINResources
| Config. Field | Value |
|---|---|
| Key (AES_256) | SlJ6NWhuhuhuhuhuhuhuhuhuhuhu |
| Pastebin | -huhuhuhu |
| Certificate | MIIE8jhuhuhuhuhuhuhuhuhuhuhu |
| ServerSignature | CC+vrmhuhuhuhuhuhuhuhuhuhuhu |
| Install | thuhuhuhu |
| BDOS | fhuhuhuhu |
| Anti-VM | fhuhuhuhu |
| Install File | Windohuhuhuhuhuhuhu |
| Install-Folder | %Thuhuhuhu |
| Version | 0.huhuhuhu |
| Hosts | chongmhuhuhuhuhuhuhuhuhuhuhu |
| Ports | 270huhuhuhu |
| Mutex | AsyncMhuhuhuhuhuhuhu |
| Delay | 3huhuhuhu |
| Group | Mahuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialKey (AES_256)
MUTEXmalicious
SlJ6NWhuhuhuhuhuhuhuhuhuhuhu
CnC
CNCmalicious
chongmhuhuhuhuhuhuhu
CnC
CNCmalicious
umarmihuhuhuhuhuhuhu
Ports
PORTmalicious
2huhuhuhu
Ports
PORTmalicious
7huhuhuhu
Mutex
MUTEXmalicious
AsyncMhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential