Overview

overview

10

Static

static

04026caca9...3a.exe

windows7_x64

10

04026caca9...3a.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    04026caca92e9c7365fb324caf88753a
  • Size 10.0MB
  • Sample201117-g1vlf97k16
  • SHA256 abeff15c4406f81d4332fa38897f618ea4c661335e6890b764b73408cfe4f48a
  • MD5 SHA1 SHA512
Score
10/10
asyncratrat

Malware Config

Extracted

Family

  • asyncrat

C2

  • :

Mutex

Attributes
  • aes_key

  • anti_detection

  • autorun

  • bdos

  • delay

  • host

  • hwid

    Write

  • install_file

  • install_folder

    8UL4yH6NbPNGBSpjhP.DJFIJOqXPfxFZLB9O8

  • mutex

  • pastebin_config

  • port

  • version

aes.plain

Targets

    • Target
      04026caca92e9c7365fb324caf88753a
    • Size 10.0MB
    • SHA256 abeff15c4406f81d4332fa38897f618ea4c661335e6890b764b73408cfe4f48a
    • MD5 SHA1 SHA512
    Score
    10/10
    asyncratrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks