Overview

overview

10

Static

static

Microsofd.ps1

windows7_x64

1

Microsofd.ps1

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Microsofd.ps1

  • Size

    441KB

  • Sample

    220221-v7zxesafg8

  • MD5

    9e3b4a2ed171ea1c888d569c7d98b944

  • SHA1

    9f4b88c179ab1485f94bc13551d33aca4d80e18a

  • SHA256

    fa74335c09c138eab6256c1fbb176aee9a8334aac65cff3bf9b602d9dc9dd554

  • SHA512

    eac8f04457080f2ed89df83a76b3855a3a7864a0c3f85f59f4c2b871660b319028a934936e09c7269b829582dfc396b16031de359fffa911bb73b7fd2e48f028

Score
10/10
asyncrat{{{{____coinnnnnnbase___}}}}}rat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

{{{{____COINNNNNNBASE___}}}}}

C2

python.blogsyte.com:6606

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • anti_vm

    false

  • bsod

    false

  • delay

    3

  • install

    false

  • install_folder

    %AppData%

  • pastebin_config

    null

aes.plain

Targets

    • Target

      Microsofd.ps1

    • Size

      441KB

    • MD5

      9e3b4a2ed171ea1c888d569c7d98b944

    • SHA1

      9f4b88c179ab1485f94bc13551d33aca4d80e18a

    • SHA256

      fa74335c09c138eab6256c1fbb176aee9a8334aac65cff3bf9b602d9dc9dd554

    • SHA512

      eac8f04457080f2ed89df83a76b3855a3a7864a0c3f85f59f4c2b871660b319028a934936e09c7269b829582dfc396b16031de359fffa911bb73b7fd2e48f028

    Score
    10/10
    asyncrat{{{{____coinnnnnnbase___}}}}}rat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Async RAT payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks