General

  • Target

    Stub.exe

  • Size

    45KB

  • Sample

    210503-hr3d1p1x1e

  • MD5

    73bcac6a9b04a0e3afa2f1b62103aeec

  • SHA1

    7583daee7155733d88e1f1e688af6ed3245fba9c

  • SHA256

    c4f1607f0ed89f4e6f26de27bd67cc511acdebdcc92441ed760fefbd190d1e32

  • SHA512

    91ea25865e4f7658a03f35a3a3a883f06fd2bb5533a2bc7f311afc69d780b59fccc9fa98e43eacb1039ac2feb6295c3eab45c843f0ec226d1997c26af599b90e

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

C2

mazi.ddns.net:2066

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • aes_key

    QOvO5FC2sdXjluSQPHx2mlSamLh7qeQR

  • anti_detection

    false

  • autorun

    true

  • bdos

    false

  • delay

    Default

  • host

    mazi.ddns.net

  • hwid

    10

  • install_file

  • install_folder

    %AppData%

  • mutex

    AsyncMutex_6SI8OkPnk

  • pastebin_config

    null

  • port

    2066

  • version

    0.5.7B

aes.plain

Targets

    • Target

      Stub.exe

    • Size

      45KB

    • MD5

      73bcac6a9b04a0e3afa2f1b62103aeec

    • SHA1

      7583daee7155733d88e1f1e688af6ed3245fba9c

    • SHA256

      c4f1607f0ed89f4e6f26de27bd67cc511acdebdcc92441ed760fefbd190d1e32

    • SHA512

      91ea25865e4f7658a03f35a3a3a883f06fd2bb5533a2bc7f311afc69d780b59fccc9fa98e43eacb1039ac2feb6295c3eab45c843f0ec226d1997c26af599b90e

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

    • Async RAT payload

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Discovery

System Information Discovery

1
T1082

Tasks