Overview

overview

10

Static

static

810bfe5be5...83.exe

windows7_x64

10

810bfe5be5...83.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    810bfe5be5ce40996ccc8099ce432683
  • Size 628KB
  • Sample201117-9ga1hmelaj
  • SHA256 6c7219ce0b85bcda4ea4fed96e66f08e2621463ac3bc1da55a108af0b35758c0
  • MD5 SHA1 SHA512
Score
10/10
asyncratpersistencerat

Malware Config

Extracted

Family

  • asyncrat

C2

  • :

Mutex

Attributes
  • aes_key

  • anti_detection

  • autorun

  • bdos

  • delay

  • host

  • hwid

    Write

  • install_file

  • install_folder

    iyY0v7Gl2PXTS41GNn.KGrYHeTkpDcQHKsSlA

  • mutex

  • pastebin_config

  • port

  • version

aes.plain

Targets

    • Target
      810bfe5be5ce40996ccc8099ce432683
    • Size 628KB
    • SHA256 6c7219ce0b85bcda4ea4fed96e66f08e2621463ac3bc1da55a108af0b35758c0
    • MD5 SHA1 SHA512
    Score
    10/10
    asyncratpersistencerat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks