General

  • Target

    4660-163-0x0000000000400000-0x0000000000412000-memory.dmp

  • Size

    72KB

  • Sample

    220930-h6fqyacha3

  • MD5

    c0647207915f60137d9f970e047f28fc

  • SHA1

    6ad2dec9ab49307494f2b2bb42054ea7147df554

  • SHA256

    04553830fc905bba420a6475fdf5cc0ad3bda80e879f23fcddc5b30cf7fbc263

  • SHA512

    b5a6ab6011dc65525959a04b18137d29cd702a76ca30720f2f0159ac4438c09f1064b35afb4445e46bf87be454805203afd5f44aa41778c2fab90e94896c2bdc

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Windows Sheel Host

C2

20.111.19.215:3152

Attributes
delay
3
install
false
install_file
Windows Sheel Host.exe
install_folder
%AppData%
aes.plain

Targets

    • Target

      4660-163-0x0000000000400000-0x0000000000412000-memory.dmp

    • Size

      72KB

    • MD5

      c0647207915f60137d9f970e047f28fc

    • SHA1

      6ad2dec9ab49307494f2b2bb42054ea7147df554

    • SHA256

      04553830fc905bba420a6475fdf5cc0ad3bda80e879f23fcddc5b30cf7fbc263

    • SHA512

      b5a6ab6011dc65525959a04b18137d29cd702a76ca30720f2f0159ac4438c09f1064b35afb4445e46bf87be454805203afd5f44aa41778c2fab90e94896c2bdc

    Score
    1/10

MITRE ATT&CK Matrix