General

  • Target

    1636405ad0ceac2cc2f216c8c6981d3c.exe

  • Size

    45KB

  • Sample

    210926-xq22kafbfj

  • MD5

    1636405ad0ceac2cc2f216c8c6981d3c

  • SHA1

    a1801a73b0e657b1527c5bdfe3f079cb0f202212

  • SHA256

    76529bae9e673736b384c748cd25c6b55327c083cdffa62477bb8542f4d3e7bd

  • SHA512

    8cf9db8a72e808ee89af8b0c6a02c3aee7f47fc15ff7a3103643b3a83723f951fc1298bb939746dfccf19d85a5b3bb88999df3fbf63c0fe6c6b338bfd74ba28a

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

IZGroup

C2

5.230.84.50:1465

5.230.84.50:1759

5.230.84.50:1985

104.37.174.26:1465

104.37.174.26:1759

104.37.174.26:1985

216.250.249.156:1465

216.250.249.156:1759

216.250.249.156:1985

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • anti_vm

    false

  • bsod

    false

  • delay

    3

  • install

    false

  • install_folder

    %AppData%

  • pastebin_config

    null

aes.plain

Targets

    • Target

      1636405ad0ceac2cc2f216c8c6981d3c.exe

    • Size

      45KB

    • MD5

      1636405ad0ceac2cc2f216c8c6981d3c

    • SHA1

      a1801a73b0e657b1527c5bdfe3f079cb0f202212

    • SHA256

      76529bae9e673736b384c748cd25c6b55327c083cdffa62477bb8542f4d3e7bd

    • SHA512

      8cf9db8a72e808ee89af8b0c6a02c3aee7f47fc15ff7a3103643b3a83723f951fc1298bb939746dfccf19d85a5b3bb88999df3fbf63c0fe6c6b338bfd74ba28a

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

    • suricata: ET MALWARE Observed Malicious SSL Cert (AsyncRAT Server)

      suricata: ET MALWARE Observed Malicious SSL Cert (AsyncRAT Server)

MITRE ATT&CK Matrix

Tasks