Overview

overview

10

Static

static

10

client1.exe

windows7-x64

10

client1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    client1.exe

  • Size

    106KB

  • Sample

    220831-zcqgqabddj

  • MD5

    a45243a9a3bbe9e9fa4ba48c406a83b4

  • SHA1

    b8bad2bfe29580012897f0e514f3414ca2d2ae6f

  • SHA256

    3e123119dcb3489d8a329f5c8cfc122f14191df2943d48a1843687fca316cc7c

  • SHA512

    463030a54cbf4209eb3b9450b295cfae5f0f799c803df7fd996ac397c9c029926fdd638255bc7d93c8c4ac0dd5d4c5dd1a2022677c889c6dd7bf8e57c9416329

  • SSDEEP

    1536:JxqjQ+P04wsmJC7SX+FDsWmPbaYk/ocpqKmY7y/Nl3r+xuw58KNFfY:sr85C7SYDsDPbaYk/o3zTbS351NFfY

Score
10/10
asyncratneshtapersistenceratspywarestealer

Malware Config

Targets

    • Target

      client1.exe

    • Size

      106KB

    • MD5

      a45243a9a3bbe9e9fa4ba48c406a83b4

    • SHA1

      b8bad2bfe29580012897f0e514f3414ca2d2ae6f

    • SHA256

      3e123119dcb3489d8a329f5c8cfc122f14191df2943d48a1843687fca316cc7c

    • SHA512

      463030a54cbf4209eb3b9450b295cfae5f0f799c803df7fd996ac397c9c029926fdd638255bc7d93c8c4ac0dd5d4c5dd1a2022677c889c6dd7bf8e57c9416329

    • SSDEEP

      1536:JxqjQ+P04wsmJC7SX+FDsWmPbaYk/ocpqKmY7y/Nl3r+xuw58KNFfY:sr85C7SYDsDPbaYk/o3zTbS351NFfY

    Score
    10/10
    asyncratneshtapersistenceratspywarestealer

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Async RAT payload

      rat

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks