Overview

overview

10

Static

static

10

341038c031...4f.exe

windows7-x64

10

341038c031...4f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    341038c031eafd3f689442574bc44f4f.exe

  • Size

    363KB

  • Sample

    221029-yh5yxsceb5

  • MD5

    341038c031eafd3f689442574bc44f4f

  • SHA1

    955519f70d8bd5c003d946d54474dac7238089a0

  • SHA256

    6d2e1ab7ef1006d5ad49b5da0f1d80370b9535b32bdbeba11eeacc2230eebed5

  • SHA512

    d134da13855016ab4b9998197894203988596afb8373972be016ea951d1d3153ff9766a6d1adac713c7444c737b955044bda5c245b68825ede07c0b1c576b027

  • SSDEEP

    6144:4bX79bnnVV2Y/uJl8OR7BwTcboZrwVM6e2WbHPI+hoj:cV27l90cbo1wVpe2Oboj

Score
10/10
asyncratdefaultrat

Malware Config

Extracted

Family

asyncrat

Version

托迪猫 v2.0.1

Botnet

Default

C2

127.0.0.1:6606

127.0.0.1:7707

127.0.0.1:8808

103.149.201.214:6606

103.149.201.214:7707

103.149.201.214:8808
Mutex

Elegy_Mutex_vdYIIf87BT

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      341038c031eafd3f689442574bc44f4f.exe

    • Size

      363KB

    • MD5

      341038c031eafd3f689442574bc44f4f

    • SHA1

      955519f70d8bd5c003d946d54474dac7238089a0

    • SHA256

      6d2e1ab7ef1006d5ad49b5da0f1d80370b9535b32bdbeba11eeacc2230eebed5

    • SHA512

      d134da13855016ab4b9998197894203988596afb8373972be016ea951d1d3153ff9766a6d1adac713c7444c737b955044bda5c245b68825ede07c0b1c576b027

    • SSDEEP

      6144:4bX79bnnVV2Y/uJl8OR7BwTcboZrwVM6e2WbHPI+hoj:cV27l90cbo1wVpe2Oboj

    Score
    10/10
    asyncratdefaultrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Async RAT payload

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks