Overview

overview

10

Static

static

10

bF3b.exe

windows7-x64

10

bF3b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bF3b.exe

  • Size

    45KB

  • Sample

    220930-wqv3ksfcgn

  • MD5

    0a5956f7becedb614fb7fc192056f0c6

  • SHA1

    1afa1a350707f41a114c0296ae53d7e0c24ed8c4

  • SHA256

    112bc23dbf145fb1c5c78e842b605a4da6202c9993114c7118fbdf902d6c7673

  • SHA512

    6032f3228cf07e7832687141535fef9c3ea3f17b50d3a87be6550a423af89bbfb6c6b5f4a4fc668525f96dd6e45c3c49310c544cca9ffd56a2c7971950ca6d86

  • SSDEEP

    768:vuwCfTg46YbWUn8jjmo2qrDKjGKG6PIyzjbFgX3iqaUQUXtBDZSx:vuwCfTgp/2OKYDy3bCXStCdSx

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

0.tcp.ngrok.io:13857

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      bF3b.exe

    • Size

      45KB

    • MD5

      0a5956f7becedb614fb7fc192056f0c6

    • SHA1

      1afa1a350707f41a114c0296ae53d7e0c24ed8c4

    • SHA256

      112bc23dbf145fb1c5c78e842b605a4da6202c9993114c7118fbdf902d6c7673

    • SHA512

      6032f3228cf07e7832687141535fef9c3ea3f17b50d3a87be6550a423af89bbfb6c6b5f4a4fc668525f96dd6e45c3c49310c544cca9ffd56a2c7971950ca6d86

    • SSDEEP

      768:vuwCfTg46YbWUn8jjmo2qrDKjGKG6PIyzjbFgX3iqaUQUXtBDZSx:vuwCfTgp/2OKYDy3bCXStCdSx

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Async RAT payload

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Discovery

            Execution

              Exfiltration

                Impact

                  Initial Access

                    Lateral Movement

                      Persistence

                        Privilege Escalation

                          Tasks