Overview

overview

10

Static

static

SCAN_COP.scr

windows7-x64

10

SCAN_COP.scr

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    y579vs.img

  • Size

    1.6MB

  • Sample

    221012-w7e3pafec5

  • MD5

    5bb357e9db222c794055eb22772d7406

  • SHA1

    29c7411796cebe86d2f814d1f4fcca718e6c58a6

  • SHA256

    e4f001d73f7d0c92df339485d0dce9019a03734dee43338f4a187dfc2c094aed

  • SHA512

    59d598771460a9c159a8fb2233b90496da9cf7701311469ba38af42f081758d5d54ef3e22190fca4c234d95f043bc0c2734bbbecf4b5fec39046f6d2141a157e

  • SSDEEP

    12288:6SDJuxq0TA5FCxv2eP0Kla6EMAXmnSBY5eUk4MVYolDfyWEYjms8hV:6S9RK4i0p9r2iYDcmy3qs8hV

Score
10/10
asyncratijefundsrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7A

Botnet

Ijefunds

C2

79.134.225.20:8808

Mutex

mmkawdairhcehilxluo

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      SCAN_COP.SCR

    • Size

      1.0MB

    • MD5

      c5da839b1c6505b50f9d18588bc29dcc

    • SHA1

      808bcb8114f6188448b06ef581965e6ee09d4562

    • SHA256

      af51aadc7d93eea0355ed2605959052333a0e124753ff5df78d16bcbf5031fbe

    • SHA512

      03cc401161ae408e0b585aee60db9caec298a9f69cd5b1323417dc49771cceb7df3711886542ca7add6ff62091c83b0ae127c26ea2f4112ca6f84edff4e7952d

    • SSDEEP

      12288:7SDJuxq0TA5FCxv2eP0Kla6EMAXmnSBY5eUk4MVYolDfyWEYjms8hV:7S9RK4i0p9r2iYDcmy3qs8hV

    Score
    10/10
    asyncratijefundsrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Async RAT payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks