Overview

overview

10

Static

static

10

tmp.exe

windows7_x64

10

tmp.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    45KB

  • Sample

    220514-skc32acgep

  • MD5

    8db7b0c04bf5c808c584c6e420c186cc

  • SHA1

    8beb02eb733c884dcd6a91cb1af837e5fc29c434

  • SHA256

    dfe95cafe13446636b1b1c3800feccfd76df1399c9f214894b6ab1e2c7a19c16

  • SHA512

    4bcee4a858fc8b309218749a22479904368956a79415ad20179a3b83922154fba74584bfabdd875360aafaefd3f239a349c1d631fd34ecc6b3296dd0b4ef0f31

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

3.144.124.4:7771

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      tmp

    • Size

      45KB

    • MD5

      8db7b0c04bf5c808c584c6e420c186cc

    • SHA1

      8beb02eb733c884dcd6a91cb1af837e5fc29c434

    • SHA256

      dfe95cafe13446636b1b1c3800feccfd76df1399c9f214894b6ab1e2c7a19c16

    • SHA512

      4bcee4a858fc8b309218749a22479904368956a79415ad20179a3b83922154fba74584bfabdd875360aafaefd3f239a349c1d631fd34ecc6b3296dd0b4ef0f31

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Async RAT payload

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks