Overview

overview

10

Static

static

44ea69c7b4...ba.exe

windows7-x64

10

44ea69c7b4...ba.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44ea69c7b4b8e1859440d62a7a0a81ba.exe

  • Size

    75KB

  • Sample

    221014-gprw7sahb6

  • MD5

    44ea69c7b4b8e1859440d62a7a0a81ba

  • SHA1

    e79eff5368acaa271fc065a90af903162858f275

  • SHA256

    37720edc7a999541c019209750cab0959f92dd3ac685c19cfa2d9f985e7b4491

  • SHA512

    bd51bc39b8d06b71abcb85c709ad53da412ee79bc06fdf025862025dcfba83e0c36a41a0b08da1f39d7d5072c6dc41ef74305ceb6580f0889c0669720a20df16

  • SSDEEP

    1536:ysDX8He2cxcOOTGEkDw7EZ1LqflIxuRE1sv1s:ysDX8H5cxcNfkDuEzqdIQREKs

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

85.209.134.94:6606

85.209.134.94:7707

85.209.134.94:8808
Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      44ea69c7b4b8e1859440d62a7a0a81ba.exe

    • Size

      75KB

    • MD5

      44ea69c7b4b8e1859440d62a7a0a81ba

    • SHA1

      e79eff5368acaa271fc065a90af903162858f275

    • SHA256

      37720edc7a999541c019209750cab0959f92dd3ac685c19cfa2d9f985e7b4491

    • SHA512

      bd51bc39b8d06b71abcb85c709ad53da412ee79bc06fdf025862025dcfba83e0c36a41a0b08da1f39d7d5072c6dc41ef74305ceb6580f0889c0669720a20df16

    • SSDEEP

      1536:ysDX8He2cxcOOTGEkDw7EZ1LqflIxuRE1sv1s:ysDX8H5cxcNfkDuEzqdIQREKs

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Async RAT payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks