General

  • Target

    2.ps1

  • Size

    316KB

  • Sample

    220125-28s9laheg8

  • MD5

    da2ba0198037e33b0d775ea03da6169e

  • SHA1

    6f195cfa87f25ece7ac46c96db03ff05e057abdc

  • SHA256

    7226d29a62bfc505a5cd9c8d13603237821caa5075bea311f095272334827e58

  • SHA512

    96489864076cdd83acf860bb50f055f45f4530f31d9c4d147f3bbd42182e02001502588ff43ae74882cf99a7f65dc1dd749c8133225e5158bac5c7f699d59320

Score
10/10

Malware Config

Targets

    • Target

      2.ps1

    • Size

      316KB

    • MD5

      da2ba0198037e33b0d775ea03da6169e

    • SHA1

      6f195cfa87f25ece7ac46c96db03ff05e057abdc

    • SHA256

      7226d29a62bfc505a5cd9c8d13603237821caa5075bea311f095272334827e58

    • SHA512

      96489864076cdd83acf860bb50f055f45f4530f31d9c4d147f3bbd42182e02001502588ff43ae74882cf99a7f65dc1dd749c8133225e5158bac5c7f699d59320

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

    • Async RAT payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Tasks